US20130198385A1 - System and Method to Generate Secure Name Records - Google Patents
System and Method to Generate Secure Name RecordsDownload PDFInfo
- Publication number
- US20130198385A1 US20130198385A1US13/360,697US201213360697AUS2013198385A1US 20130198385 A1US20130198385 A1US 20130198385A1US 201213360697 AUS201213360697 AUS 201213360697AUS 2013198385 A1US2013198385 A1US 2013198385A1
- Authority
- US
- United States
- Prior art keywords
- name
- service
- service gateway
- record
- response
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
Images
Classifications
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L43/00—Arrangements for monitoring or testing data switching networks
- H04L43/08—Monitoring or testing based on specific metrics, e.g. QoS, energy consumption or environmental parameters
- H04L43/0805—Monitoring or testing based on specific metrics, e.g. QoS, energy consumption or environmental parameters by checking availability
- H04L43/0817—Monitoring or testing based on specific metrics, e.g. QoS, energy consumption or environmental parameters by checking availability by checking functioning
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L12/00—Data switching networks
- H04L12/64—Hybrid switching systems
- H04L12/6418—Hybrid transport
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
- H04L41/50—Network service management, e.g. ensuring proper service fulfilment according to agreements
- H04L41/5058—Service discovery by the service manager
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L61/00—Network arrangements, protocols or services for addressing or naming
- H04L61/30—Managing network names, e.g. use of aliases or nicknames
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L61/00—Network arrangements, protocols or services for addressing or naming
- H04L61/30—Managing network names, e.g. use of aliases or nicknames
- H04L61/3015—Name registration, generation or assignment
- H04L61/302—Administrative registration, e.g. for domain names at internet corporation for assigned names and numbers [ICANN]
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L61/00—Network arrangements, protocols or services for addressing or naming
- H04L61/45—Network directories; Name-to-address mapping
- H04L61/4505—Network directories; Name-to-address mapping using standardised directories; using standardised directory access protocols
- H04L61/4511—Network directories; Name-to-address mapping using standardised directories; using standardised directory access protocols using domain name system [DNS]
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L2101/00—Indexing scheme associated with group H04L61/00
- H04L2101/60—Types of network addresses
- H04L2101/69—Types of network addresses using geographic information, e.g. room number
Definitions
- This present inventionrelates generally to data communications, and more specifically, to a service gateway.
- Today Internetrelies on a proper operating name services over the Internet, such as Domain Name System (DNS) services and other similar name services. These name services translate a service name, or a resource name into one or more network or service addresses corresponding to servers providing the service or resource. To ensure availability of the service or resource, it is common to have many servers offering the service or resource. Such availability may address one or more service problems such as server failure, server maintenance, network delays, network traffic congestion, service scaling with expected large numbers of service sessions, service restrictions to geographical areas, secure access for private networks, or other service considerations.
- DNSDomain Name System
- the response it receivesmay contain service addresses that are not appropriate for the host or the service name requested.
- abc.commay have different services for different geographic location.
- a host on the East coastshould be served by a resource server on the East coast, while hosts on the West coast should be served by servers on the West coast.
- movies.universal-studio.comhas different distribution agreements with studios over different countries. Hosts from Japan should be directed to servers that enforces Japan's services. Hosts from Belgium should be directed to servers enforcing European services.
- a geo-location based name service gatewayis deployed between a host and a name service server.
- the service gatewayreceives a response from the name service server.
- the service gatewayfilters the response according to a set of location based rules and the host before sending the modified response to the host.
- the service gatewaystores the response and uses it to respond to another request for the same service or resource name from another host.
- the processallows the service gateway to use the same response for many name service requests. The process not only reduces the load onto the name service servers, but also improves the service quality the hosts receive.
- the obtaining (b)comprises: (b 1 ) creating a name service request using the name; (b 2 ) sending the name service request to the name service server; and (b 3 ) receiving a response to the name service request from the name service server, the response comprising the service server name record comprising the one or more service server name entries corresponding to the name.
- the methodfurther comprises: (e) receiving a subsequent name service request comprising the name; (f) comparing the name against the stored plurality of service gateway name records; and (g) in response to determining a match with a given service gateway name record, sending the given service gateway name record as a response to the subsequent name service request.
- the methodfurther comprises: (h) in response to determining there is no match with the plurality of service gateway name records, creating a name service request using the name; and (i) sending the name service request to the name service server.
- the generating (c)comprises: (c 1 ) determining a number of name entry combinations as N out of the M name entries obtained from the name service server; (c 2 ) creating a given service gateway name record using the name and a given name entry combination; and (c 3 ) repeating the creating (c 2 ) according to a storage capacity of the service gateway.
- the creating (c 2 )comprises: (c 2 i ) creating the given service gateway name record using the name and the given name entry combination according to a service policy.
- the name entry combinationscomprise an ordered number of the name entry combinations.
- the sending (d)comprises: (d 1 ) determining a status of at least one server corresponding to the service gateway name record; (d 2 ) in response to determining that the status indicates that the at least one server is available, sending the service gateway name record to the host as the response to the name service request.
- the sending (d)further comprises: (d 3 ) in response to determining that the status indicates that one or more servers corresponding to the service gateway name record is unavailable, do not send the service gateway name record to the host.
- FIGS. 1 and 1 aillustrate an embodiment of a service gateway servicing a name service request from a host according to the present invention.
- FIGS. 2 and 2 aillustrate an embodiment of a process to generate a plurality of name records according to the present invention.
- FIG. 3illustrates an embodiment of a process to select a name record based on availability status of a server according to the present invention.
- the present inventioncan take the form of an entirely hardware embodiment, an entirely software embodiment or an embodiment containing both hardware and software elements.
- the present inventionis implemented in software, which includes but is not limited to firmware, resident software, microcode, etc.
- the present inventioncan take the form of a computer program product accessible from a computer-usable or computer-readable medium providing program code for use by or in connection with a computer or any instruction execution system.
- a computer-usable or computer readable mediumcan be any apparatus that can contain, store, communicate, propagate, or transport eh program for use by or in connection with the instruction execution system, apparatus, or device.
- the mediumcan be an electronic, magnetic, optical, electromagnetic, infrared, or semiconductor system (or apparatus or device) or a propagation medium.
- Examples of a computer-readable mediuminclude a semiconductor or solid state memory, magnetic tape, a removable computer diskette, a random access memory (RAM), a read-only memory (ROM), a rigid magnetic disk and an optical disk.
- Current examples of optical disksinclude compact disk—read only memory (CD-ROM), compact disk—read/write (CD-R/W) and DVD.
- a data processing system suitable for storing and/or executing program codewill include at least one processor coupled directly or indirectly to memory elements through a system bus.
- the memory elementscan include local memory employed during actual execution of the program code, bulk storage, and cache memories which provide temporary storage of at least some program code in order to reduce the number of times code must be retrieved from bulk storage during execution.
- I/O devicesincluding but not limited to keyboards, displays, point devices, etc.
- I/O controllersincluding but not limited to keyboards, displays, point devices, etc.
- Network adaptersmay also be coupled to the system to enable the data processing system to become coupled to other data processing systems or remote printers or storage devices through intervening private or public networks.
- Modems, cable modem and Ethernet cardsare just a few of the currently available types of network adapters.
- each block in the flowchart or block diagramsmay represent a module, segment, or portion of code, which comprises one or more executable instructions for implementing the specified local function(s).
- the functions noted in the blockmay occur out of the order noted in the figures. For example, two blocks shown in succession may, in fact, be executed substantially concurrently, or the blocks may sometimes be executed in the reverse order, depending upon the functionality involved.
- FIGS. 1 and 1 aillustrate an embodiment of a name services service gateway servicing a name service request between a host and name service server according to the present invention.
- host 100sends a name service request 400 to a service gateway 300 .
- name service request 400includes a Domain Name System (DNS) request, a request for a network address based on a name, a domain name, a machine name, a computer name, a computing device name, a service name, a resource identity or any network identity.
- DNSDomain Name System
- Host 100is typically a computing device with network access capabilities.
- host 100is a workstation, a desktop personal computer or a laptop personal computer, a Personal Data Assistant (PDA), a tablet computing device, a smartphone, or a cellular phone, a set-top box, an Internet media viewer, an Internet media player, a smart sensor, a smart medical device, a net-top box, a networked television set, a networked DVR, a networked Blu-ray player, or a media center.
- PDAPersonal Data Assistant
- Service gateway 300is a computing device operationally coupled to a processor 313 and a computer readable medium 314 .
- the computer readable medium 314stores computer readable program code, which when executed by the processor 313 , implements the various embodiments of the present invention as described herein.
- service gateway 300is implemented as a server load balancer, an application delivery controller, a service delivery platform, a traffic manager, a security gateway, a component of a firewall system, a component of a virtual private network (VPN), a load balancer for video servers, a gateway for network address translation, a DNS server, a geo-location based name server, or a gateway enforcing access policies based on location information.
- service gateway 300includes functionality to provide name services to host 100 .
- Service gateway 300receives name service request 400 and obtains a name 404 from name service request 400 .
- name 404includes a domain name such as “www.abc.com”, a computer name such as “yoda”, a network device name such as “router1456”, a service name such as “mail-service.anyisp.biz”, a network resource name “apn.mobile-network.net” or “music-storage.private-network”, or a computer name such as “john-laptop5”.
- service gateway 300uses name 404 to create a name service request 408 , and sends the name service request 408 to a name service server 200 .
- the service gateway 300receives a name service server name record 660 from the server 200 , which contains one or more name entries 665 corresponding to name 404 .
- Service gateway 300receives name record 660 and obtains name entries 665 from name record 660 .
- name service server 200is a DNS server or a global service load balancer. In one embodiment, name service server 200 is a network computing device capable of processing name service request 408 . In one embodiment, name service server 200 includes a software program residing in a network computing device where the software program processes name service request 408 .
- service gateway 300includes functionality of name service server 200 .
- the name service server 200 component of service gateway 300processes name service request 408 and responds with name record 660 .
- the name service server 200 component of service gateway 300does not require name service request 408 and processes name 404 to respond with name record 660 .
- service gateway 300uses name 404 and the name entries 665 , service gateway 300 generates a plurality of service gateway name records 670 .
- service gateway 300stores name records 670 in storage 315 .
- Service gateway 300selects a name record 604 of name records 670 and sends name record 604 to host 100 as a response to name service request 400 .
- name record 660is encrypted, for example, using a public key encryption method.
- Service gateway 300obtains a key 661 , based on information of name record 660 and server 200 .
- Service gateway 300uses key 661 to decode name record 660 and obtains name entries 665 .
- service gateway 300encrypts name records 670 .
- Service gateway 300obtains a key 671 and uses key 671 to encrypt all the name records in name records 670 .
- service gateway 300obtains a separate key 675 to encrypt name record 674 .
- service gateway 300obtains key 661 , key 671 or key 675 from a server computer in a data network. In one embodiment, service gateway 300 obtains the keys from storage 315 .
- name records 670include an unencrypted copy of name record 604 for use in comparison operations and an encrypted copy of name record 604 .
- service gateway 300sends the encrypted copy of name record 604 to host 100 as a response to name service request 400 .
- service gateway 300In another embodiment in FIG. 1 , service gateway 300 generates name records 670 from a prior name service request, and stores name records 670 in storage 315 . In response to receiving a subsequent name service request 400 , service gateway 300 obtains name 404 from name service request 400 . Service gateway 300 compares the name 404 against name records in the storage 315 and determines there is a match with name records 670 . Service gateway 300 selects a matching name record 604 from name records 670 , and sends name record 604 to host 100 as a response to name service request 400 . In this embodiment, the service gateway 300 avoids creating a name service request to be sent to the name service server 200 .
- service gateway 300does not find a match for the name 404 in the name records in the storage 315 . In response, service gateway 300 proceeds to generate name service request 408 to be sent to server 200 .
- FIGS. 2 and 2 aillustrate an embodiment of a process to generate service gateway name records 670 according to the present invention.
- service gateway 300generates name records 670 using name entries 665 and name 404 .
- Service gateway 300stores generated name records 670 in storage 315 .
- service gateway 300limits the storage area for name records 670 within a capacity 327 of the storage 315 .
- Service gateway 300generates a name record using name 404 and one or more entries in name entries 665 .
- FIG. 2 aillustrates steps of a method to generate one or more name records with one or more entries in name entries 665 .
- Step 5If (N 911 >M 913 ) Goto Step 16
- Step 7For each Name Entry Combination 905 in Name Entry Combinations 903
- Step 8Generate a Name Record 606 using Name 404 and Name Entry Combination 905
- Step 10If Capacity 329 ⁇ Size 619 then Goto Step 16
- Step 11Include Name Record 606 into Name Records 670
- Step 12Decrement Capacity 329 by Size 619
- Step 13End For
- Step 14Increment N 911 by 1
- Step 15Goto Step 5
- Step 16Store Name Records 670 into Storage 315
- name entries 665include 5 name entries ⁇ A, B, C, D, E ⁇ .
- Name Entry Combinations 903may include ⁇ A ⁇ , ⁇ B ⁇ , ⁇ C ⁇ , ⁇ D ⁇ , ⁇ E ⁇ .
- N 9112
- Name Entry Combinations 903may include ⁇ A, B ⁇ , ⁇ A, C ⁇ , ⁇ A, D ⁇ , ⁇ A, E ⁇ , ⁇ B, C ⁇ , ⁇ B, D ⁇ , ⁇ B, E ⁇ , ⁇ C, D ⁇ , ⁇ C, E ⁇ , ⁇ D, E ⁇ .
- Name Entry Combinations 903may include ⁇ A, B, C, D ⁇ , ⁇ A, B, C, E ⁇ , ⁇ A, B, D, E ⁇ , ⁇ A, C, D, E ⁇ , ⁇ B, C, D, E ⁇ . In one embodiment, Name Entry Combinations 903 may include ⁇ A, B, D, E ⁇ , ⁇ A, C, D, E ⁇ , ⁇ B, C, D, E ⁇ . In one embodiment, Name Entry Combinations 903 may not include all possible name entry combinations of N 911 entries from M 913 entries. In one embodiment, service gateway 300 creates Name Entry Combinations 903 based on a service policy such as a location-based policy, a traffic management policy or a security policy. For example, if a given Name Entry Combination is determined to violate the service policy, a name record is not created for the given Name Entry Combination.
- a service policysuch as a location-based policy, a traffic management policy or a security policy. For example, if a given Name Entry Combination is determined to
- name entries 665include a specific order for the M 913 entries.
- Combinations 903include a collection of ordered combinations of N 911 entries.
- N 911 in step 2is set to M 913 and N 911 is decremented by 1 in step 14 .
- service gateway 300obtains availability status 225 for server 215 .
- Server 215is a network computer corresponding to name entry 615 .
- server 215is a computing device such as a Web server, a file server, a video server, a database server, an application server, a voice system, a conferencing server, a media gateway, a SIP server, a remote access server, a VPN server, a media center, an app server or a network server providing a network or application service to host 100 .
- Status 225is an indication whether server 215 is available for service. In one embodiment, server 215 is disconnected from network, busy, overload, or under maintenance, does not have necessary software or hardware component, shutdown, not running, or other undesirable condition preventing server 215 from providing services. Status 225 indicates unavailability of server 215 .
- service gateway 300obtains status 225 from server 215 in a communication channel or a communication session over data network 153 with server 215 . In one embodiment, service gateway 300 obtains status 225 from another network computer 250 such as a network management system or a network administrative system.
- status 225indicates server 215 is available.
- server 215resumes operation after maintenance, or after installation of a piece of software or a hardware component.
- server 215becomes available when the CPU load is low, or when server 215 is connected to network.
- server 215indicates availability status in status 225 when there is no change to availability from a previously communicated status.
- service gateway 300connects to server 215 which is corresponded to a name entry 615 .
- Name entry 615is used in a generated name record 604 .
- name record 604is associated with an attribute 625 , which is included in service gateway 300 .
- Service gateway 300stores status 225 in attribute 625 .
- Service gateway 300checks status 225 of server 215 from time to time. In one embodiment, service gateway 300 checks periodically such as every 5 minutes, every hour, or every 10 seconds. In one embodiment, service gateway 300 receives an updated status 225 whenever there is a change to server 215 . Service gateway stores updated status 225 in attribute 625 .
- service gateway 300determines a name in name record 604 matches name 404 .
- Service gateway 300further examines attribute 625 of name record 604 . If attribute 625 indicates status 225 of server 215 is not available, service gateway 300 does not select name record 604 as a response to name service request 400 .
- service gateway 300determines status 225 in attribute 625 indicates server 215 is available. Service gateway 300 selects name record 604 as a response to name service request 400 .
- name record 604includes a second name entry 612 corresponding to server 212 and status 222 corresponding to server 212 .
- service gateway 300also stores status 222 in attribute 625 .
- Service gateway 300examines attribute 625 for status 225 and status 222 .
- status 222 and status 225indicate server 212 and server 215 are available respectively, service gateway 300 selects name record 604 as a response to name service request 400 .
- one of status 222 or status 225indicates unavailability. Service gateway 300 does not select name record 604 as a response.
- attribute 625includes statuses associating to servers for all name entries in name record 604 .
- Service gateway 300examines all the statuses for availability before selecting name record 604 as a response to name service request 400 .
Landscapes
- Engineering & Computer Science (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Environmental & Geological Engineering (AREA)
- Data Exchanges In Wide-Area Networks (AREA)
- Computer And Data Communications (AREA)
- Telephonic Communication Services (AREA)
Abstract
Description
- This present invention relates generally to data communications, and more specifically, to a service gateway.
- Today Internet relies on a proper operating name services over the Internet, such as Domain Name System (DNS) services and other similar name services. These name services translate a service name, or a resource name into one or more network or service addresses corresponding to servers providing the service or resource. To ensure availability of the service or resource, it is common to have many servers offering the service or resource. Such availability may address one or more service problems such as server failure, server maintenance, network delays, network traffic congestion, service scaling with expected large numbers of service sessions, service restrictions to geographical areas, secure access for private networks, or other service considerations.
- When a host sends a name service request, the response it receives may contain service addresses that are not appropriate for the host or the service name requested. For example, abc.com may have different services for different geographic location. A host on the East coast should be served by a resource server on the East coast, while hosts on the West coast should be served by servers on the West coast. In another example, movies.universal-studio.com has different distribution agreements with studios over different countries. Hosts from Japan should be directed to servers that enforces Japan's services. Hosts from Belgium should be directed to servers enforcing European services.
- For example, a geo-location based name service gateway is deployed between a host and a name service server. The service gateway receives a response from the name service server. The service gateway filters the response according to a set of location based rules and the host before sending the modified response to the host. Typically the service gateway stores the response and uses it to respond to another request for the same service or resource name from another host. The process allows the service gateway to use the same response for many name service requests. The process not only reduces the load onto the name service servers, but also improves the service quality the hosts receive.
- However, this process does not works well with a secure name service, where the response from the name service server is encrypted and where the modified response needs to be encrypted before sending to the host. Decryption and encryption are computationally complex and consume valuable CPU cycles of the service gateway. The service quality offered by the service gateway would degrade during a busy period when a large number of name service requests are received by the service gateway over a short period of time. Busy periods are common in many networks and for many Internet services.
- Therefore, there is a need for a method to generate a plurality of secure name records based on a name record response from a name service server so as to reduce the need to generate a secure modified response for each name service request.
- According to one embodiment of the present invention, a method to generate name records by a service gateway comprising a processor comprises: (a) receiving a name service request from a host, the request comprising a name; (b) obtaining a service server name record from a name service server, the service server name record comprising one or more name entries corresponding to the name; (c) generating and storing a plurality of service gateway name records using the name and the name entries; and (d) sending a service gateway name record of the plurality of service gateway name records to the host as a response to the name service request.
- In one aspect of the present invention, the obtaining (b) comprises: (b1) creating a name service request using the name; (b2) sending the name service request to the name service server; and (b3) receiving a response to the name service request from the name service server, the response comprising the service server name record comprising the one or more service server name entries corresponding to the name.
- In one aspect of the present invention, the method further comprises: (e) receiving a subsequent name service request comprising the name; (f) comparing the name against the stored plurality of service gateway name records; and (g) in response to determining a match with a given service gateway name record, sending the given service gateway name record as a response to the subsequent name service request.
- In one aspect of the present invention, the method further comprises: (h) in response to determining there is no match with the plurality of service gateway name records, creating a name service request using the name; and (i) sending the name service request to the name service server.
- In one aspect of the present invention, the generating (c) comprises: (c1) determining a number of name entry combinations as N out of the M name entries obtained from the name service server; (c2) creating a given service gateway name record using the name and a given name entry combination; and (c3) repeating the creating (c2) according to a storage capacity of the service gateway.
- In one aspect of the present invention, the creating (c2) comprises: (c2i) creating the given service gateway name record using the name and the given name entry combination according to a service policy.
- In one aspect of the present invention, the name entry combinations comprise an ordered number of the name entry combinations.
- In one aspect of the present invention, the sending (d) comprises: (d1) determining a status of at least one server corresponding to the service gateway name record; (d2) in response to determining that the status indicates that the at least one server is available, sending the service gateway name record to the host as the response to the name service request.
- In one aspect of the present invention, the sending (d) further comprises: (d3) in response to determining that the status indicates that one or more servers corresponding to the service gateway name record is unavailable, do not send the service gateway name record to the host.
- System and computer program products corresponding to the above-summarized methods are also described and claimed herein.
FIGS. 1 and 1 aillustrate an embodiment of a service gateway servicing a name service request from a host according to the present invention.FIGS. 2 and 2 aillustrate an embodiment of a process to generate a plurality of name records according to the present invention.FIG. 3 illustrates an embodiment of a process to select a name record based on availability status of a server according to the present invention.- The following description is presented to enable one of ordinary skill in the art to make and use the present invention and is provided in the context of a patent application and its requirements. Various modifications to the embodiment will be readily apparent to those skilled in the art and the generic principles herein may be applied to other embodiments. Thus, the present invention is not intended to be limited to the embodiment shown but is to be accorded the widest scope consistent with the principles and features described herein.
- The present invention can take the form of an entirely hardware embodiment, an entirely software embodiment or an embodiment containing both hardware and software elements. In a preferred embodiment, the present invention is implemented in software, which includes but is not limited to firmware, resident software, microcode, etc.
- Furthermore, the present invention can take the form of a computer program product accessible from a computer-usable or computer-readable medium providing program code for use by or in connection with a computer or any instruction execution system. For the purposes of this description, a computer-usable or computer readable medium can be any apparatus that can contain, store, communicate, propagate, or transport eh program for use by or in connection with the instruction execution system, apparatus, or device.
- The medium can be an electronic, magnetic, optical, electromagnetic, infrared, or semiconductor system (or apparatus or device) or a propagation medium. Examples of a computer-readable medium include a semiconductor or solid state memory, magnetic tape, a removable computer diskette, a random access memory (RAM), a read-only memory (ROM), a rigid magnetic disk and an optical disk. Current examples of optical disks include compact disk—read only memory (CD-ROM), compact disk—read/write (CD-R/W) and DVD.
- A data processing system suitable for storing and/or executing program code will include at least one processor coupled directly or indirectly to memory elements through a system bus. The memory elements can include local memory employed during actual execution of the program code, bulk storage, and cache memories which provide temporary storage of at least some program code in order to reduce the number of times code must be retrieved from bulk storage during execution.
- Input/output or I/O devices (including but not limited to keyboards, displays, point devices, etc.) can be coupled to the system either directly or through intervening I/O controllers.
- Network adapters may also be coupled to the system to enable the data processing system to become coupled to other data processing systems or remote printers or storage devices through intervening private or public networks. Modems, cable modem and Ethernet cards are just a few of the currently available types of network adapters.
- The flowchart and block diagrams in the Figures illustrate the architecture, functionality, and operation of possible implementations of systems, methods and computer program products according to various embodiments of the present invention. In this regard, each block in the flowchart or block diagrams may represent a module, segment, or portion of code, which comprises one or more executable instructions for implementing the specified local function(s). It should also be noted that, in some alternative implementations, the functions noted in the block may occur out of the order noted in the figures. For example, two blocks shown in succession may, in fact, be executed substantially concurrently, or the blocks may sometimes be executed in the reverse order, depending upon the functionality involved. It will also be noted that each block of the block diagrams and/or flowchart illustration, and combinations of blocks in the block diagrams and/or flowchart illustration, can be implemented by special purpose hardware-based systems that perform the specified functions or acts, or combinations of special purpose hardware and computer instructions.
- The terminology used herein is for the purpose of describing particular embodiments only and is not intended to be limiting of the invention. As used herein, the singular forms “a”, “an” and “the” are intended to include the plural forms as well, unless the context clearly indicates otherwise. It will be further understood that the terms “comprises” and/or “comprising,” when used in this specification, specify the presence of stated features, integers, steps, operations, elements, and/or components, but do not preclude the presence or addition of one or more other features, integers, steps, operations, elements, components, and/or groups thereof.
FIGS. 1 and 1 aillustrate an embodiment of a name services service gateway servicing a name service request between a host and name service server according to the present invention. As illustrated inFIG. 1 ,host 100 sends aname service request 400 to aservice gateway 300. In one embodiment,name service request 400 includes a Domain Name System (DNS) request, a request for a network address based on a name, a domain name, a machine name, a computer name, a computing device name, a service name, a resource identity or any network identity.Host 100 is typically a computing device with network access capabilities. In one embodiment, host100 is a workstation, a desktop personal computer or a laptop personal computer, a Personal Data Assistant (PDA), a tablet computing device, a smartphone, or a cellular phone, a set-top box, an Internet media viewer, an Internet media player, a smart sensor, a smart medical device, a net-top box, a networked television set, a networked DVR, a networked Blu-ray player, or a media center.Service gateway 300 is a computing device operationally coupled to aprocessor 313 and a computerreadable medium 314. The computer readable medium314 stores computer readable program code, which when executed by theprocessor 313, implements the various embodiments of the present invention as described herein. In some embodiments,service gateway 300 is implemented as a server load balancer, an application delivery controller, a service delivery platform, a traffic manager, a security gateway, a component of a firewall system, a component of a virtual private network (VPN), a load balancer for video servers, a gateway for network address translation, a DNS server, a geo-location based name server, or a gateway enforcing access policies based on location information. Typicallyservice gateway 300 includes functionality to provide name services to host100.Service gateway 300 receivesname service request 400 and obtains aname 404 fromname service request 400. In one embodiment,name 404 includes a domain name such as “www.abc.com”, a computer name such as “yoda”, a network device name such as “router1456”, a service name such as “mail-service.anyisp.biz”, a network resource name “apn.mobile-network.net” or “music-storage.private-network”, or a computer name such as “john-laptop5”.- In one embodiment,
service gateway 300 usesname 404 to create aname service request 408, and sends thename service request 408 to aname service server 200. In response, theservice gateway 300 receives a name serviceserver name record 660 from theserver 200, which contains one ormore name entries 665 corresponding to name404.Service gateway 300 receivesname record 660 and obtainsname entries 665 fromname record 660. - In one embodiment,
name service server 200 is a DNS server or a global service load balancer. In one embodiment,name service server 200 is a network computing device capable of processingname service request 408. In one embodiment,name service server 200 includes a software program residing in a network computing device where the software program processesname service request 408. - In one embodiment,
service gateway 300 includes functionality ofname service server 200. In this embodiment, thename service server 200 component ofservice gateway 300 processesname service request 408 and responds withname record 660. In another embodiment, thename service server 200 component ofservice gateway 300 does not requirename service request 408 and processes name404 to respond withname record 660. - Using
name 404 and thename entries 665,service gateway 300 generates a plurality of service gateway name records670. In one embodiment,service gateway 300 stores name records670 instorage 315.Service gateway 300 selects aname record 604 of name records670 and sendsname record 604 to host100 as a response toname service request 400. - In one embodiment as illustrated in Figure la,
name record 660 is encrypted, for example, using a public key encryption method.Service gateway 300 obtains a key661, based on information ofname record 660 andserver 200.Service gateway 300 uses key661 to decodename record 660 and obtainsname entries 665. - In one embodiment,
service gateway 300 encrypts name records670.Service gateway 300 obtains a key671 and uses key671 to encrypt all the name records in name records670. In one embodiment, for eachname record 674 in name records670,service gateway 300 obtains aseparate key 675 to encryptname record 674. - In one embodiment,
service gateway 300 obtains key661, key671 or key675 from a server computer in a data network. In one embodiment,service gateway 300 obtains the keys fromstorage 315. - In one embodiment, name records670 include an unencrypted copy of
name record 604 for use in comparison operations and an encrypted copy ofname record 604. In one embodiment,service gateway 300 sends the encrypted copy ofname record 604 to host100 as a response toname service request 400. - In another embodiment in
FIG. 1 ,service gateway 300 generates name records670 from a prior name service request, and stores name records670 instorage 315. In response to receiving a subsequentname service request 400,service gateway 300 obtainsname 404 fromname service request 400.Service gateway 300 compares thename 404 against name records in thestorage 315 and determines there is a match with name records670.Service gateway 300 selects a matchingname record 604 from name records670, and sendsname record 604 to host100 as a response toname service request 400. In this embodiment, theservice gateway 300 avoids creating a name service request to be sent to thename service server 200. - In one embodiment,
service gateway 300 does not find a match for thename 404 in the name records in thestorage 315. In response,service gateway 300 proceeds to generatename service request 408 to be sent toserver 200. FIGS. 2 and 2 aillustrate an embodiment of a process to generate service gateway name records670 according to the present invention. As illustrated inFIG. 2 ,service gateway 300 generates name records670 usingname entries 665 andname 404.Service gateway 300 stores generated name records670 instorage 315. In one embodiment,service gateway 300 limits the storage area for name records670 within acapacity 327 of thestorage 315.Service gateway 300 generates a namerecord using name 404 and one or more entries inname entries 665.FIG. 2 aillustrates steps of a method to generate one or more name records with one or more entries inname entries 665.- Step1: Set
M 913=number of entries inName Entries 665 - Step2: Set
N 911=1 - Step3:
Set Capacity 329=Capacity 327 - Step4: Set
Name Records 670=empty - Step5: If (
N 911>M913)Goto Step 16 - Step6: Set Name Entry Combinations903=a collection of name entry combinations of
N 911 name entries out of theM 913 name entries inname entries 665. - Step7: For each Name Entry Combination905 in Name Entry Combinations903
- Step8: Generate a
Name Record 606 usingName 404 and Name Entry Combination905 - Step9: Set
Size 619=Storage Size ofName Record 606 - Step10: If
Capacity 329<Size 619 thenGoto Step 16 - Step11: Include
Name Record 606 intoName Records 670 - Step12:
Decrement Capacity 329 bySize 619 - Step13: End For
- Step14:
Increment N 911 by 1 - Step15: Goto Step5
- Step16:
Store Name Records 670 intoStorage 315 - In an embodiment,
name entries 665 include 5 name entries {A, B, C, D, E}. In an embodiment of step6 whereN 911=1, Name Entry Combinations903 may include {{A}, {B}, {C}, {D}, {E}}. In one embodiment of step6 whereN 911=2, Name Entry Combinations903 may include {{A, B}, {A, C}, {A, D}, {A, E}, {B, C}, {B, D}, {B, E}, {C, D}, {C, E}, {D, E}}. In one embodiment of step6 whereN 911 is being 4, Name Entry Combinations903 may include {{A, B, C, D}, {A, B, C, E}, {A, B, D, E}, {A, C, D, E}, {B, C, D, E}}. In one embodiment, Name Entry Combinations903 may include {{A, B, D, E}, {A, C, D, E}, {B, C, D, E}}. In one embodiment, Name Entry Combinations903 may not include all possible name entry combinations ofN 911 entries fromM 913 entries. In one embodiment,service gateway 300 creates Name Entry Combinations903 based on a service policy such as a location-based policy, a traffic management policy or a security policy. For example, if a given Name Entry Combination is determined to violate the service policy, a name record is not created for the given Name Entry Combination. - In one embodiment,
name entries 665 include a specific order for theM 913 entries. Combinations903 include a collection of ordered combinations ofN 911 entries. - In one embodiment,
N 911 instep 2 is set toM 913 andN 911 is decremented by 1 in step14. In this embodiment, the test in step5 is changed to “if (N 911<=0)”. - In one embodiment as illustrated in
FIG. 3 ,service gateway 300 obtains availability status225 forserver 215.Server 215 is a network computer corresponding to nameentry 615. In one embodiment,server 215 is a computing device such as a Web server, a file server, a video server, a database server, an application server, a voice system, a conferencing server, a media gateway, a SIP server, a remote access server, a VPN server, a media center, an app server or a network server providing a network or application service to host100. - Status225 is an indication whether
server 215 is available for service. In one embodiment,server 215 is disconnected from network, busy, overload, or under maintenance, does not have necessary software or hardware component, shutdown, not running, or other undesirablecondition preventing server 215 from providing services. Status225 indicates unavailability ofserver 215. - In one embodiment,
service gateway 300 obtains status225 fromserver 215 in a communication channel or a communication session overdata network 153 withserver 215. In one embodiment,service gateway 300 obtains status225 from anothernetwork computer 250 such as a network management system or a network administrative system. - In one embodiment, status225 indicates
server 215 is available. In one embodiment,server 215 resumes operation after maintenance, or after installation of a piece of software or a hardware component. In another embodiment,server 215 becomes available when the CPU load is low, or whenserver 215 is connected to network. In one embodiment,server 215 indicates availability status in status225 when there is no change to availability from a previously communicated status. - In one embodiment,
service gateway 300 connects toserver 215 which is corresponded to aname entry 615.Name entry 615 is used in a generatedname record 604. In one embodiment,name record 604 is associated with anattribute 625, which is included inservice gateway 300.Service gateway 300 stores status225 inattribute 625.Service gateway 300 checks status225 ofserver 215 from time to time. In one embodiment,service gateway 300 checks periodically such as every 5 minutes, every hour, or every 10 seconds. In one embodiment,service gateway 300 receives an updated status225 whenever there is a change toserver 215. Service gateway stores updated status225 inattribute 625. - During the processing of
name 404 ofname service request 400, as illustrated inFIGS. 1 and 1 a,service gateway 300 determines a name inname record 604matches name 404.Service gateway 300 further examinesattribute 625 ofname record 604. Ifattribute 625 indicates status225 ofserver 215 is not available,service gateway 300 does not selectname record 604 as a response toname service request 400. - In one embodiment,
service gateway 300 determines status225 inattribute 625 indicatesserver 215 is available.Service gateway 300 selectsname record 604 as a response toname service request 400. - In one embodiment,
name record 604 includes asecond name entry 612 corresponding toserver 212 and status222 corresponding toserver 212. In one embodiment,service gateway 300 also stores status222 inattribute 625.Service gateway 300 examinesattribute 625 for status225 and status222. In one embodiment, status222 and status225 indicateserver 212 andserver 215 are available respectively,service gateway 300 selectsname record 604 as a response toname service request 400. In one embodiment, one of status222 or status225 indicates unavailability.Service gateway 300 does not selectname record 604 as a response. - In one embodiment,
attribute 625 includes statuses associating to servers for all name entries inname record 604.Service gateway 300 examines all the statuses for availability before selectingname record 604 as a response toname service request 400. - Although the present invention has been described in accordance with the embodiments shown, one of ordinary skill in the art will readily recognize that there could be variations to the embodiments and those variations would be within the spirit and scope of the present invention. Accordingly, many modifications may be made by one of ordinary skill in the art without departing from the spirit and scope of the appended claims.
Claims (28)
1. A method to generate name records by a service gateway comprising a processor, comprising:
(a) receiving a name service request from a host, the request comprising a name;
(b) obtaining a service server name record from a name service server, the service server name record comprising one or more name entries corresponding to the name;
(c) generating and storing a plurality of service gateway name records using the name and the name entries; and
(d) sending a service gateway name record of the plurality of service gateway name records to the host as a response to the name service request.
2. The method ofclaim 1 , wherein the obtaining (b) comprises:
(b1) creating a name service request using the name;
(b2) sending the name service request to the name service server; and
(b3) receiving a response to the name service request from the name service server, the response comprising the service server name record comprising the one or more service server name entries corresponding to the name.
3. The method ofclaim 1 , further comprising:
(e) receiving a subsequent name service request comprising the name;
comparing the name against the stored plurality of service gateway name records; and
(g) in response to determining a match with a given service gateway name record, sending the given service gateway name record as a response to the subsequent name service request.
4. The method ofclaim 3 , further comprising:
(h) in response to determining there is no match with the plurality of service gateway name records, creating a name service request using the name; and sending the name service request to the name service server.
5. The method ofclaim 1 , wherein the generating (c) comprises:
(c1) determining a number of name entry combinations as N out of the M name entries obtained from the name service server;
(c2) creating a given service gateway name record using the name and a given name entry combination; and
(c3) repeating the creating (c2) according to a storage capacity of the service gateway.
6. The method ofclaim 5 , wherein the creating (c2) comprises:
(c2i) creating the given service gateway name record using the name and the given name entry combination according to a service policy.
7. The method ofclaim 5 , wherein the name entry combinations comprises an ordered number of the name entry combinations.
8. The method ofclaim 1 , wherein the sending (d) comprises:
(d1) determining a status of at least one server corresponding to the service gateway name record;
(d2) in response to determining that the status indicates that the at least one server is available, sending the service gateway name record to the host as the response to the name service request.
9. The method ofclaim 8 , wherein the sending (d) further comprises:
(d3) in response to determining that the status indicates that one or more servers corresponding to the service gateway name record is unavailable, do not send the service gateway name record to the host.
10. The method ofclaim 1 , wherein the sending (d) comprises:
(d1) encrypting the service gateway name record; and
(d2) sending the encrypted service gateway name record to the host as the response to the name service request.
11. A computer program product comprising a computer readable device having a computer readable program, wherein the computer readable program when executed on a computer causes the computer to:
(a) receive a name service request from a host, the request comprising a name;
(b) obtain a service server name record from a name service server, the service server name record comprising one or more name entries corresponding to the name;
(c) generate and store a plurality of service gateway name records using the name and the name entries; and
(d) send a service gateway name record of the plurality of service gateway name records to the host as a response to the name service request.
12. The computer program product ofclaim 11 , wherein the obtain (b) comprises:
(b1) create a name service request using the name;
(b2) send the name service request to the name service server; and
(b3) receive a response to the name service request from the name service server, the response comprising the service server name record comprising the one or more service server name entries corresponding to the name.
13. The computer program product ofclaim 11 , further comprising:
(e) receive a subsequent name service request comprising the name;
(f) compare the name against the stored plurality of service gateway name records; and
(g) in response to determining a match with a given service gateway name record, send the given service gateway name record as a response to the subsequent name service request.
14. The computer program product ofclaim 13 , further comprising:
(h) in response to determining there is no match with the plurality of service gateway name records, create a name service request using the name; and
send the name service request to the name service server.
15. The computer program product ofclaim 11 , wherein the generate (c) comprises:
(c1) determine a number of name entry combinations as N out of the M name entries obtained from the name service server;
(c2) create a given service gateway name record using the name and a given name entry combination; and
(c3) repeat the create (c2) according to a storage capacity of the service gateway.
16. The computer program product ofclaim 15 , wherein the create (c2) comprises:
(c2i) create the given service gateway name record using the name and the given name entry combination according to a service policy.
17. The computer program product ofclaim 11 , wherein the send (d) comprises:
(d1) determine a status of at least one server corresponding to the service gateway name record;
(d2) in response to determining that the status indicates that the at least one server is available, send the service gateway name record to the host as the response to the name service request.
18. The computer program product ofclaim 17 , wherein the send (d) further comprises:
(d3) in response to determining that the status indicates that one or more servers corresponding to the service gateway name record is unavailable, do not send the service gateway name record to the host.
19. The computer program product ofclaim 11 , wherein the send (d) comprises:
(d1) encrypt the service gateway name record; and
(d2) send the encrypted service gateway name record to the host as the response to the name service request.
20. A service gateway, comprising:
a processor; and
a computer readable device having a computer readable program, wherein the computer readable program when executed by the processor, causes the service gateway to:
(a) receive a name service request from a host, the request comprising a name;
(b) obtain a service server name record from a name service server, the service server name record comprising one or more name entries corresponding to the name;
(c) generate and store a plurality of service gateway name records using the name and the name entries; and
(d) send a service gateway name record of the plurality of service gateway name records to the host as a response to the name service request.
21. The service gateway ofclaim 20 , wherein the obtain (b) comprises:
(b1) create a name service request using the name;
(b2) send the name service request to the name service server; and
(b3) receive a response to the name service request from the name service server, the response comprising the service server name record comprising the one or more service server name entries corresponding to the name.
22. The service gateway ofclaim 20 , further causing the service gateway to:
(e) receive a subsequent name service request comprising the name;
compare the name against the stored plurality of service gateway name records; and
(g) in response to determining a match with a given service gateway name record, send the given service gateway name record as a response to the subsequent name service request.
23. The service gateway ofclaim 22 , further causing the service gateway to:
(h) in response to determining there is no match with the plurality of service gateway name records, create a name service request using the name; and
send the name service request to the name service server.
24. The service gateway ofclaim 20 , wherein the generate (c) comprises:
(c1) determine a number of name entry combinations as N out of the M name entries obtained from the name service server;
(c2) create a given service gateway name record using the name and a given name entry combination; and
(c3) repeat the create (c2) according to a storage capacity of the service gateway.
25. The service gateway ofclaim 24 , wherein the create (c2) comprises:
(c2i) create the given service gateway name record using the name and the given name entry combination according to a service policy.
26. The service gateway ofclaim 20 , wherein the send (d) comprises:
(d1) determine a status of at least one server corresponding to the service gateway name record;
(d2) in response to determining that the status indicates that the at least one server is available, send the service gateway name record to the host as the response to the name service request.
27. The service gateway ofclaim 26 , wherein the send (d) further comprises:
(d3) in response to determining that the status indicates that one or more servers corresponding to the service gateway name record is unavailable, do not send the service gateway name record to the host.
28. The service gateway ofclaim 20 , wherein the send (d) comprises:
(d1) encrypt the service gateway name record; and
(d2) send the encrypted service gateway name record to the host as the response to the name service request.
Priority Applications (6)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| US13/360,697US10044582B2 (en) | 2012-01-28 | 2012-01-28 | Generating secure name records |
| CN201380006961.7ACN104106241B (en) | 2012-01-28 | 2013-01-23 | Systems and methods for generating security name records |
| CN201710698508.7ACN107580029B (en) | 2012-01-28 | 2013-01-23 | Computer readable storage medium |
| HK14112290.6AHK1198848B (en) | 2012-01-28 | 2013-01-23 | System and method to generate secure name records |
| PCT/US2013/022607WO2013112492A1 (en) | 2012-01-28 | 2013-01-23 | System and method to generate secure name records |
| US16/052,396US10904119B2 (en) | 2012-01-28 | 2018-08-01 | Generating secure name records |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| US13/360,697US10044582B2 (en) | 2012-01-28 | 2012-01-28 | Generating secure name records |
Related Child Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| US16/052,396ContinuationUS10904119B2 (en) | 2012-01-28 | 2018-08-01 | Generating secure name records |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| US20130198385A1true US20130198385A1 (en) | 2013-08-01 |
| US10044582B2 US10044582B2 (en) | 2018-08-07 |
Family
ID=48871302
Family Applications (2)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| US13/360,697Active2032-06-14US10044582B2 (en) | 2012-01-28 | 2012-01-28 | Generating secure name records |
| US16/052,396ActiveUS10904119B2 (en) | 2012-01-28 | 2018-08-01 | Generating secure name records |
Family Applications After (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| US16/052,396ActiveUS10904119B2 (en) | 2012-01-28 | 2018-08-01 | Generating secure name records |
Country Status (3)
| Country | Link |
|---|---|
| US (2) | US10044582B2 (en) |
| CN (2) | CN107580029B (en) |
| WO (1) | WO2013112492A1 (en) |
Cited By (42)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US8977749B1 (en) | 2012-07-05 | 2015-03-10 | A10 Networks, Inc. | Allocating buffer for TCP proxy session based on dynamic network conditions |
| US9094364B2 (en) | 2011-12-23 | 2015-07-28 | A10 Networks, Inc. | Methods to manage services over a service gateway |
| US9215275B2 (en) | 2010-09-30 | 2015-12-15 | A10 Networks, Inc. | System and method to balance servers based on server load status |
| US9219751B1 (en) | 2006-10-17 | 2015-12-22 | A10 Networks, Inc. | System and method to apply forwarding policy to an application session |
| US9253152B1 (en) | 2006-10-17 | 2016-02-02 | A10 Networks, Inc. | Applying a packet routing policy to an application session |
| US9270774B2 (en) | 2011-10-24 | 2016-02-23 | A10 Networks, Inc. | Combining stateless and stateful server load balancing |
| US9338225B2 (en) | 2012-12-06 | 2016-05-10 | A10 Networks, Inc. | Forwarding policies on a virtual service network |
| US9386088B2 (en) | 2011-11-29 | 2016-07-05 | A10 Networks, Inc. | Accelerating service processing using fast path TCP |
| US9531846B2 (en) | 2013-01-23 | 2016-12-27 | A10 Networks, Inc. | Reducing buffer usage for TCP proxy session based on delayed acknowledgement |
| US9609052B2 (en) | 2010-12-02 | 2017-03-28 | A10 Networks, Inc. | Distributing application traffic to servers based on dynamic service response time |
| US9621575B1 (en) | 2014-12-29 | 2017-04-11 | A10 Networks, Inc. | Context aware threat protection |
| US9705800B2 (en) | 2012-09-25 | 2017-07-11 | A10 Networks, Inc. | Load distribution in data networks |
| US9722918B2 (en) | 2013-03-15 | 2017-08-01 | A10 Networks, Inc. | System and method for customizing the identification of application or content type |
| US9787581B2 (en) | 2015-09-21 | 2017-10-10 | A10 Networks, Inc. | Secure data flow open information analytics |
| US9838425B2 (en) | 2013-04-25 | 2017-12-05 | A10 Networks, Inc. | Systems and methods for network access control |
| US9843484B2 (en) | 2012-09-25 | 2017-12-12 | A10 Networks, Inc. | Graceful scaling in software driven networks |
| US9900252B2 (en) | 2013-03-08 | 2018-02-20 | A10 Networks, Inc. | Application delivery controller and global server load balancer |
| US9906422B2 (en) | 2014-05-16 | 2018-02-27 | A10 Networks, Inc. | Distributed system to determine a server's health |
| US9912555B2 (en) | 2013-03-15 | 2018-03-06 | A10 Networks, Inc. | System and method of updating modules for application or content identification |
| US9942152B2 (en) | 2014-03-25 | 2018-04-10 | A10 Networks, Inc. | Forwarding data packets using a service-based forwarding policy |
| US9942162B2 (en) | 2014-03-31 | 2018-04-10 | A10 Networks, Inc. | Active application response delay time |
| US9960967B2 (en) | 2009-10-21 | 2018-05-01 | A10 Networks, Inc. | Determining an application delivery server based on geo-location information |
| US9986061B2 (en) | 2014-06-03 | 2018-05-29 | A10 Networks, Inc. | Programming a data network device using user defined scripts |
| US9992107B2 (en) | 2013-03-15 | 2018-06-05 | A10 Networks, Inc. | Processing data packets using a policy based network path |
| US9992229B2 (en) | 2014-06-03 | 2018-06-05 | A10 Networks, Inc. | Programming a data network device using user defined scripts with licenses |
| US10002141B2 (en) | 2012-09-25 | 2018-06-19 | A10 Networks, Inc. | Distributed database in software driven networks |
| US10021174B2 (en) | 2012-09-25 | 2018-07-10 | A10 Networks, Inc. | Distributing service sessions |
| US10027761B2 (en) | 2013-05-03 | 2018-07-17 | A10 Networks, Inc. | Facilitating a secure 3 party network session by a network device |
| US10038693B2 (en) | 2013-05-03 | 2018-07-31 | A10 Networks, Inc. | Facilitating secure network traffic by an application delivery controller |
| US10129122B2 (en) | 2014-06-03 | 2018-11-13 | A10 Networks, Inc. | User defined objects for network devices |
| US10187377B2 (en) | 2017-02-08 | 2019-01-22 | A10 Networks, Inc. | Caching network generated security certificates |
| USRE47296E1 (en) | 2006-02-21 | 2019-03-12 | A10 Networks, Inc. | System and method for an adaptive TCP SYN cookie with time validation |
| US10230770B2 (en) | 2013-12-02 | 2019-03-12 | A10 Networks, Inc. | Network proxy layer for policy-based application proxies |
| US10243791B2 (en) | 2015-08-13 | 2019-03-26 | A10 Networks, Inc. | Automated adjustment of subscriber policies |
| US10250475B2 (en) | 2016-12-08 | 2019-04-02 | A10 Networks, Inc. | Measurement of application response delay time |
| US10341118B2 (en) | 2016-08-01 | 2019-07-02 | A10 Networks, Inc. | SSL gateway with integrated hardware security module |
| US10382562B2 (en) | 2016-11-04 | 2019-08-13 | A10 Networks, Inc. | Verification of server certificates using hash codes |
| US10397270B2 (en) | 2017-01-04 | 2019-08-27 | A10 Networks, Inc. | Dynamic session rate limiter |
| US10454879B2 (en)* | 2014-04-22 | 2019-10-22 | Pismo Labs Technology Limited | Methods and systems for processing a DNS request |
| US10581976B2 (en) | 2015-08-12 | 2020-03-03 | A10 Networks, Inc. | Transmission control of protocol state exchange for dynamic stateful service insertion |
| US10812348B2 (en) | 2016-07-15 | 2020-10-20 | A10 Networks, Inc. | Automatic capture of network data for a detected anomaly |
| US11159354B2 (en)* | 2017-05-12 | 2021-10-26 | Qualcomm Incorporated | Increasing reference signal density in wireless communications |
Families Citing this family (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US10044582B2 (en) | 2012-01-28 | 2018-08-07 | A10 Networks, Inc. | Generating secure name records |
| US9106561B2 (en) | 2012-12-06 | 2015-08-11 | A10 Networks, Inc. | Configuration of a virtual service network |
Family Cites Families (487)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US4001819A (en) | 1975-01-31 | 1977-01-04 | Wise Security Corporation | Alarm system for combined hazard detections |
| US5101402A (en) | 1988-05-24 | 1992-03-31 | Digital Equipment Corporation | Apparatus and method for realtime monitoring of network sessions in a local area network |
| US5163088A (en) | 1991-03-06 | 1992-11-10 | Locascio Peter | Facsimile security system |
| US5218602A (en) | 1991-04-04 | 1993-06-08 | Dsc Communications Corporation | Interprocessor switching network |
| US5359659A (en) | 1992-06-19 | 1994-10-25 | Doren Rosenthal | Method for securing software against corruption by computer viruses |
| US5414833A (en) | 1993-10-27 | 1995-05-09 | International Business Machines Corporation | Network security system and method using a parallel finite state machine adaptive active monitor and responder |
| US5684875A (en) | 1994-10-21 | 1997-11-04 | Ellenberger; Hans | Method and apparatus for detecting a computer virus on a computer |
| JP3262689B2 (en) | 1995-05-19 | 2002-03-04 | 富士通株式会社 | Remote control system |
| JP2962203B2 (en) | 1995-09-28 | 1999-10-12 | 日本電気株式会社 | Load balancing method for online information processing system |
| US5935207A (en) | 1996-06-03 | 1999-08-10 | Webtv Networks, Inc. | Method and apparatus for providing remote site administrators with user hits on mirrored web sites |
| US5774660A (en) | 1996-08-05 | 1998-06-30 | Resonate, Inc. | World-wide-web server with delayed resource-binding for resource-based load balancing on a distributed resource multi-node network |
| US6119236A (en) | 1996-10-07 | 2000-09-12 | Shipley; Peter M. | Intelligent network security device and method |
| US5958053A (en) | 1997-01-30 | 1999-09-28 | At&T Corp. | Communications protocol with improved security |
| WO1998042108A1 (en) | 1997-03-20 | 1998-09-24 | Ericsson Inc. | Method for implementing a transport layer protocol for wireless packet data delivery |
| US5995981A (en) | 1997-06-16 | 1999-11-30 | Telefonaktiebolaget Lm Ericsson | Initialization of replicated data objects |
| EP1021757A1 (en) | 1997-07-25 | 2000-07-26 | Starvox, Inc. | Apparatus and method for integrated voice gateway |
| US6205115B1 (en) | 1997-09-10 | 2001-03-20 | Tdk Corporation | Disc cartridge |
| JP3369445B2 (en) | 1997-09-22 | 2003-01-20 | 富士通株式会社 | Network service server load adjusting device, method and recording medium |
| US5940002A (en) | 1997-10-10 | 1999-08-17 | Ut Automotive Dearborn, Inc. | Security system with random number remote communication |
| US7167927B2 (en) | 1997-10-14 | 2007-01-23 | Alacritech, Inc. | TCP/IP offload device with fast-path TCP ACK generating and transmitting mechanism |
| US8782199B2 (en) | 1997-10-14 | 2014-07-15 | A-Tech Llc | Parsing a packet header |
| US7237036B2 (en) | 1997-10-14 | 2007-06-26 | Alacritech, Inc. | Fast-path apparatus for receiving data corresponding a TCP connection |
| US6434620B1 (en) | 1998-08-27 | 2002-08-13 | Alacritech, Inc. | TCP/IP offload network interface device |
| US6226680B1 (en) | 1997-10-14 | 2001-05-01 | Alacritech, Inc. | Intelligent network interface system method for protocol processing |
| US6047268A (en) | 1997-11-04 | 2000-04-04 | A.T.&T. Corporation | Method and apparatus for billing for transactions conducted over the internet |
| US6718387B1 (en)* | 1997-12-10 | 2004-04-06 | Sun Microsystems, Inc. | Reallocating address spaces of a plurality of servers using a load balancing policy and a multicast channel |
| US6003069A (en) | 1997-12-16 | 1999-12-14 | Lexmark International, Inc. | Client/server printer driver system |
| US6088804A (en) | 1998-01-12 | 2000-07-11 | Motorola, Inc. | Adaptive system and method for responding to computer network security attacks |
| US6167062A (en) | 1998-02-02 | 2000-12-26 | Tellabs Operations, Inc. | System and associated method for the synchronization and control of multiplexed payloads over a telecommunications network |
| US6131163A (en) | 1998-02-17 | 2000-10-10 | Cisco Technology, Inc. | Network gateway mechanism having a protocol stack proxy |
| JPH11313102A (en) | 1998-02-27 | 1999-11-09 | Fujitsu Ltd | Access control list generation method and its device |
| US6459682B1 (en) | 1998-04-07 | 2002-10-01 | International Business Machines Corporation | Architecture for supporting service level agreements in an IP network |
| JPH11338836A (en) | 1998-05-25 | 1999-12-10 | Nippon Telegr & Teleph Corp <Ntt> | Computer Network Load Balancing System |
| TW375721B (en) | 1998-06-17 | 1999-12-01 | Ind Tech Res Inst | DES chip processor capable of executing data encryption standard (DES) operation |
| US6219706B1 (en) | 1998-10-16 | 2001-04-17 | Cisco Technology, Inc. | Access control for networks |
| US6571274B1 (en) | 1998-11-05 | 2003-05-27 | Beas Systems, Inc. | Clustered enterprise Java™ in a secure distributed processing system |
| US6321338B1 (en) | 1998-11-09 | 2001-11-20 | Sri International | Network surveillance |
| US6850965B2 (en) | 1998-11-17 | 2005-02-01 | Arthur Douglas Allen | Method for connection acceptance and rapid determination of optimal multi-media content delivery over network |
| US6449651B1 (en) | 1998-11-19 | 2002-09-10 | Toshiba America Information Systems, Inc. | System and method for providing temporary remote access to a computer |
| JP2000276432A (en) | 1999-03-24 | 2000-10-06 | Nec Corp | Dynamic load distribution system for transaction message |
| JP2000307634A (en) | 1999-04-15 | 2000-11-02 | Kdd Corp | Congestion control method by relay station in packet switching network |
| EP1049307A1 (en) | 1999-04-29 | 2000-11-02 | International Business Machines Corporation | Method and system for dispatching client sessions within a cluster of servers connected to the World Wide Web |
| US20010049741A1 (en) | 1999-06-18 | 2001-12-06 | Bryan D. Skene | Method and system for balancing load distribution on a wide area network |
| US7600131B1 (en) | 1999-07-08 | 2009-10-06 | Broadcom Corporation | Distributed processing in a cryptography acceleration chip |
| EP1067458A1 (en) | 1999-07-09 | 2001-01-10 | CANAL+ Société Anonyme | Running and testing applications |
| US6374300B2 (en) | 1999-07-15 | 2002-04-16 | F5 Networks, Inc. | Method and system for storing load balancing information with an HTTP cookie |
| US6779117B1 (en) | 1999-07-23 | 2004-08-17 | Cybersoft, Inc. | Authentication program for a computer operating system |
| JP2001051859A (en) | 1999-08-11 | 2001-02-23 | Hitachi Ltd | Load information communication method |
| US6715081B1 (en) | 1999-08-12 | 2004-03-30 | International Business Machines Corporation | Security rule database searching in a network security environment |
| US6754832B1 (en) | 1999-08-12 | 2004-06-22 | International Business Machines Corporation | Security rule database searching in a network security environment |
| WO2001013228A2 (en) | 1999-08-13 | 2001-02-22 | Sun Microsystems, Inc. | Graceful distribution in application server load balancing |
| AU6795100A (en) | 1999-08-21 | 2001-03-19 | Webever, Inc. | Method for content delivery over the internet |
| US8179809B1 (en) | 1999-08-23 | 2012-05-15 | Oracle America, Inc. | Approach for allocating resources to an apparatus based on suspendable resource requirements |
| US7463648B1 (en) | 1999-08-23 | 2008-12-09 | Sun Microsystems, Inc. | Approach for allocating resources to an apparatus based on optional resource requirements |
| US7703102B1 (en) | 1999-08-23 | 2010-04-20 | Oracle America, Inc. | Approach for allocating resources to an apparatus based on preemptable resource requirements |
| US8019870B1 (en) | 1999-08-23 | 2011-09-13 | Oracle America, Inc. | Approach for allocating resources to an apparatus based on alternative resource requirements |
| US8032634B1 (en) | 1999-08-23 | 2011-10-04 | Oracle America, Inc. | Approach for allocating resources to an apparatus based on resource requirements |
| US6735702B1 (en) | 1999-08-31 | 2004-05-11 | Intel Corporation | Method and system for diagnosing network intrusion |
| US6594780B1 (en) | 1999-10-19 | 2003-07-15 | Inasoft, Inc. | Operating system and data protection |
| US6748414B1 (en) | 1999-11-15 | 2004-06-08 | International Business Machines Corporation | Method and apparatus for the load balancing of non-identical servers in a network environment |
| US6952728B1 (en) | 1999-12-01 | 2005-10-04 | Nortel Networks Limited | Providing desired service policies to subscribers accessing internet |
| US6754706B1 (en) | 1999-12-16 | 2004-06-22 | Speedera Networks, Inc. | Scalable domain name system with persistence and load balancing |
| JP2003518998A (en) | 1999-12-30 | 2003-06-17 | ザ プロクター アンド ギャンブル カンパニー | Articles for providing food made of biodegradable plastic |
| US6587866B1 (en) | 2000-01-10 | 2003-07-01 | Sun Microsystems, Inc. | Method for distributing packets to server nodes using network client affinity and packet distribution table |
| US6820133B1 (en) | 2000-02-07 | 2004-11-16 | Netli, Inc. | System and method for high-performance delivery of web content using high-performance communications protocol between the first and second specialized intermediate nodes to optimize a measure of communications performance between the source and the destination |
| US6725272B1 (en) | 2000-02-18 | 2004-04-20 | Netscaler, Inc. | Apparatus, method and computer program product for guaranteed content delivery incorporating putting a client on-hold based on response time |
| US20030187688A1 (en) | 2000-02-25 | 2003-10-02 | Fey Christopher T. | Method, system and computer program for health data collection, analysis, report generation and access |
| US7159237B2 (en) | 2000-03-16 | 2007-01-02 | Counterpane Internet Security, Inc. | Method and system for dynamic network intrusion monitoring, detection and response |
| US8380854B2 (en) | 2000-03-21 | 2013-02-19 | F5 Networks, Inc. | Simplified method for processing multiple connections from the same client |
| JP2001298449A (en) | 2000-04-12 | 2001-10-26 | Matsushita Electric Ind Co Ltd | Security communication method, communication system and its device |
| US6519703B1 (en) | 2000-04-14 | 2003-02-11 | James B. Joyce | Methods and apparatus for heuristic firewall |
| US6976090B2 (en)* | 2000-04-20 | 2005-12-13 | Actona Technologies Ltd. | Differentiated content and application delivery via internet |
| US20010042204A1 (en) | 2000-05-11 | 2001-11-15 | David Blaker | Hash-ordered databases and methods, systems and computer program products for use of a hash-ordered database |
| TW477140B (en) | 2000-05-30 | 2002-02-21 | Inst Information Industry | Embedded intrusion detection system |
| US6757822B1 (en) | 2000-05-31 | 2004-06-29 | Networks Associates Technology, Inc. | System, method and computer program product for secure communications using a security service provider manager |
| US8204082B2 (en) | 2000-06-23 | 2012-06-19 | Cloudshield Technologies, Inc. | Transparent provisioning of services over a network |
| US7031267B2 (en) | 2000-12-21 | 2006-04-18 | 802 Systems Llc | PLD-based packet filtering methods with PLD configuration data update of filtering rules |
| US7013482B1 (en) | 2000-07-07 | 2006-03-14 | 802 Systems Llc | Methods for packet filtering including packet invalidation if packet validity determination not timely made |
| US7814180B2 (en) | 2000-07-13 | 2010-10-12 | Infoblox, Inc. | Domain name service server |
| CN1200368C (en) | 2000-08-18 | 2005-05-04 | 清华大学 | Local re-transmission method of using TCP for un-reliable transmission network |
| US7711790B1 (en) | 2000-08-24 | 2010-05-04 | Foundry Networks, Inc. | Securing an accessible computer system |
| US7010605B1 (en) | 2000-08-29 | 2006-03-07 | Microsoft Corporation | Method and apparatus for encoding and storing session data |
| US6772334B1 (en) | 2000-08-31 | 2004-08-03 | Networks Associates, Inc. | System and method for preventing a spoofed denial of service attack in a networked computing environment |
| JP3501361B2 (en) | 2000-09-04 | 2004-03-02 | インターナショナル・ビジネス・マシーンズ・コーポレーション | Computer network system, computer system, communication method between computer systems, method for measuring computer system performance, and recording medium |
| US7398317B2 (en) | 2000-09-07 | 2008-07-08 | Mazu Networks, Inc. | Thwarting connection-based denial of service attacks |
| JP2002091936A (en) | 2000-09-11 | 2002-03-29 | Hitachi Ltd | Load distribution device and load estimation method |
| US9525696B2 (en) | 2000-09-25 | 2016-12-20 | Blue Coat Systems, Inc. | Systems and methods for processing data flows |
| US7454500B1 (en) | 2000-09-26 | 2008-11-18 | Foundry Networks, Inc. | Global server load balancing |
| EP1330725B1 (en) | 2000-09-29 | 2012-03-21 | Alacritech, Inc. | Intelligent network storage interface system and devices |
| US6813635B1 (en) | 2000-10-13 | 2004-11-02 | Hewlett-Packard Development Company, L.P. | System and method for distributing load among redundant independent stateful world wide web server sites |
| WO2002035359A2 (en) | 2000-10-26 | 2002-05-02 | Prismedia Networks, Inc. | Method and system for managing distributed content and related metadata |
| US7739398B1 (en) | 2000-11-21 | 2010-06-15 | Avaya Inc. | Dynamic load balancer |
| US20020078164A1 (en) | 2000-12-13 | 2002-06-20 | Marnetics Ltd. | System and method for data transfer acceleration in a TCP network environment |
| WO2002048846A2 (en) | 2000-12-14 | 2002-06-20 | Quizid Technologies Limited | An authentication system |
| US7218722B1 (en) | 2000-12-18 | 2007-05-15 | Westell Technologies, Inc. | System and method for providing call management services in a virtual private network using voice or video over internet protocol |
| US6959346B2 (en) | 2000-12-22 | 2005-10-25 | Mosaid Technologies, Inc. | Method and system for packet encryption |
| US6779033B1 (en) | 2000-12-28 | 2004-08-17 | Networks Associates Technology, Inc. | System and method for transacting a validated application session in a networked computing environment |
| US7301899B2 (en) | 2001-01-31 | 2007-11-27 | Comverse Ltd. | Prevention of bandwidth congestion in a denial of service or other internet-based attack |
| US7155515B1 (en) | 2001-02-06 | 2006-12-26 | Microsoft Corporation | Distributed load balancing for single entry-point systems |
| US7149817B2 (en) | 2001-02-15 | 2006-12-12 | Neteffect, Inc. | Infiniband TM work queue to TCP/IP translation |
| US6732279B2 (en) | 2001-03-14 | 2004-05-04 | Terry George Hoffman | Anti-virus protection system and method |
| US7454523B2 (en) | 2001-03-16 | 2008-11-18 | Intel Corporation | Geographic location determination including inspection of network address |
| US7313822B2 (en) | 2001-03-16 | 2007-12-25 | Protegrity Corporation | Application-layer security method and system |
| US7533409B2 (en) | 2001-03-22 | 2009-05-12 | Corente, Inc. | Methods and systems for firewalling virtual private networks |
| US7349970B2 (en) | 2001-03-29 | 2008-03-25 | International Business Machines Corporation | Workload management of stateful program entities |
| US20040073707A1 (en)* | 2001-05-23 | 2004-04-15 | Hughes Electronics Corporation | Generating a list of network addresses for pre-loading a network address cache via multicast |
| US6839700B2 (en) | 2001-05-23 | 2005-01-04 | International Business Machines Corporation | Load balancing content requests using dynamic document generation cost information |
| GB0113844D0 (en) | 2001-06-07 | 2001-08-01 | Marconi Comm Ltd | Real time processing |
| US7194766B2 (en) | 2001-06-12 | 2007-03-20 | Corrent Corporation | Method and system for high-speed processing IPSec security protocol packets |
| WO2002103970A1 (en) | 2001-06-18 | 2002-12-27 | Tatara Systems, Inc. | Method and apparatus for converging local area and wide area wireless data networks |
| US6944678B2 (en) | 2001-06-18 | 2005-09-13 | Transtech Networks Usa, Inc. | Content-aware application switch and methods thereof |
| US8180921B2 (en) | 2001-06-19 | 2012-05-15 | Intel Corporation | Method and apparatus for load balancing |
| US7343399B2 (en) | 2001-06-25 | 2008-03-11 | Nortel Networks Limited | Apparatus and method for managing internet resource requests |
| ATE286641T1 (en) | 2001-07-03 | 2005-01-15 | Ericsson Telefon Ab L M | METHOD AND SYSTEM FOR HANDLING MULTIPLE REGISTRATIONS |
| US7363353B2 (en) | 2001-07-06 | 2008-04-22 | Juniper Networks, Inc. | Content service aggregation device for a data center |
| US7305492B2 (en) | 2001-07-06 | 2007-12-04 | Juniper Networks, Inc. | Content service aggregation system |
| US7509369B1 (en) | 2001-07-11 | 2009-03-24 | Swsoft Holdings, Ltd. | Balancing shared servers in virtual environments |
| US7366794B2 (en) | 2001-07-13 | 2008-04-29 | Certicom Corp. | Method and apparatus for resolving a web site address when connected with a virtual private network (VPN) |
| US7072958B2 (en) | 2001-07-30 | 2006-07-04 | Intel Corporation | Identifying network management policies |
| US7222187B2 (en) | 2001-07-31 | 2007-05-22 | Sun Microsystems, Inc. | Distributed trust mechanism for decentralized networks |
| US20040187032A1 (en) | 2001-08-07 | 2004-09-23 | Christoph Gels | Method, data carrier, computer system and computer progamme for the identification and defence of attacks in server of network service providers and operators |
| US7039037B2 (en) | 2001-08-20 | 2006-05-02 | Wang Jiwei R | Method and apparatus for providing service selection, redirection and managing of subscriber access to multiple WAP (Wireless Application Protocol) gateways simultaneously |
| US6928553B2 (en) | 2001-09-18 | 2005-08-09 | Aastra Technologies Limited | Providing internet protocol (IP) security |
| EP2403219B1 (en) | 2001-09-28 | 2014-10-22 | Level 3 CDN International, Inc. | Method for name to address resolution |
| FR2830397B1 (en) | 2001-09-28 | 2004-12-03 | Evolium Sas | METHOD FOR IMPROVING THE PERFORMANCE OF A TRANSMISSION PROTOCOL USING A RETRANSMISSION TIMER |
| JP3730563B2 (en) | 2001-11-02 | 2006-01-05 | キヤノンソフトウェア株式会社 | Session management apparatus, session management method, program, and recording medium |
| US7958199B2 (en) | 2001-11-02 | 2011-06-07 | Oracle America, Inc. | Switching systems and methods for storage management in digital networks |
| US7370353B2 (en) | 2001-11-05 | 2008-05-06 | Cisco Technology, Inc. | System and method for managing dynamic network sessions |
| US7512980B2 (en) | 2001-11-30 | 2009-03-31 | Lancope, Inc. | Packet sampling flow-based detection of network intrusions |
| JP2003186776A (en) | 2001-12-13 | 2003-07-04 | Hitachi Ltd | Congestion control system |
| WO2003058451A1 (en) | 2002-01-04 | 2003-07-17 | Internet Security Systems, Inc. | System and method for the managed security control of processes on a computer system |
| WO2003060671A2 (en) | 2002-01-04 | 2003-07-24 | Lab 7 Networks, Inc. | Communication security system |
| US6633835B1 (en) | 2002-01-10 | 2003-10-14 | Networks Associates Technology, Inc. | Prioritized data capture, classification and filtering in a network monitoring environment |
| US7058718B2 (en) | 2002-01-15 | 2006-06-06 | International Business Machines Corporation | Blended SYN cookies |
| US8090866B1 (en) | 2002-01-18 | 2012-01-03 | Cisco Technology, Inc. | TCP proxy connection management in a gigabit environment |
| US7076555B1 (en) | 2002-01-23 | 2006-07-11 | Novell, Inc. | System and method for transparent takeover of TCP connections between servers |
| CN1714545A (en) | 2002-01-24 | 2005-12-28 | 艾维西系统公司 | System and method for fault tolerant data communication |
| US7222366B2 (en) | 2002-01-28 | 2007-05-22 | International Business Machines Corporation | Intrusion event filtering |
| WO2003065177A2 (en) | 2002-02-01 | 2003-08-07 | John Fairweather | System and method for navigating data |
| US7584262B1 (en) | 2002-02-11 | 2009-09-01 | Extreme Networks | Method of and system for allocating resources to resource requests based on application of persistence policies |
| US7228359B1 (en) | 2002-02-12 | 2007-06-05 | Cisco Technology, Inc. | Methods and apparatus for providing domain name service based on a client identifier |
| CA2372092C (en) | 2002-02-15 | 2010-04-06 | Cognos Incorporated | A queuing model for a plurality of servers |
| US20030195962A1 (en) | 2002-04-10 | 2003-10-16 | Satoshi Kikuchi | Load balancing of servers |
| US20030196081A1 (en) | 2002-04-11 | 2003-10-16 | Raymond Savarda | Methods, systems, and computer program products for processing a packet-object using multiple pipelined processing modules |
| US8161539B2 (en) | 2002-04-19 | 2012-04-17 | International Business Machines Corporation | IPSec network adapter verifier |
| TW574655B (en) | 2002-04-24 | 2004-02-01 | Nat Datacomm Corp | A WLAN network security control and intrusion detection method |
| US7383570B2 (en) | 2002-04-25 | 2008-06-03 | Intertrust Technologies, Corp. | Secure authentication systems and methods |
| US7707295B1 (en) | 2002-05-03 | 2010-04-27 | Foundry Networks, Inc. | Connection rate limiting |
| US8554929B1 (en) | 2002-05-03 | 2013-10-08 | Foundry Networks, Llc | Connection rate limiting for server load balancing and transparent cache switching |
| US7340535B1 (en) | 2002-06-04 | 2008-03-04 | Fortinet, Inc. | System and method for controlling routing in a virtual router system |
| US6888807B2 (en) | 2002-06-10 | 2005-05-03 | Ipr Licensing, Inc. | Applying session services based on packet flows |
| US7277963B2 (en) | 2002-06-26 | 2007-10-02 | Sandvine Incorporated | TCP proxy providing application layer modifications |
| US7237262B2 (en) | 2002-07-09 | 2007-06-26 | Itt Manufacturing Enterprises, Inc. | System and method for anti-replay processing of a data packet |
| US7254133B2 (en) | 2002-07-15 | 2007-08-07 | Intel Corporation | Prevention of denial of service attacks |
| US7069438B2 (en) | 2002-08-19 | 2006-06-27 | Sowl Associates, Inc. | Establishing authenticated network connections |
| US20040039936A1 (en) | 2002-08-21 | 2004-02-26 | Yi-Sern Lai | Apparatus and method for high speed IPSec processing |
| ATE540505T1 (en) | 2002-08-26 | 2012-01-15 | Ibm | DETERMINING THE LEVEL OF THREAT ASSOCIATED WITH A NETWORK ACTIVITY |
| US7430755B1 (en) | 2002-09-03 | 2008-09-30 | Fs Networks, Inc. | Method and system for providing persistence in a secure network access |
| US7613796B2 (en) | 2002-09-11 | 2009-11-03 | Microsoft Corporation | System and method for creating improved overlay network with an efficient distributed data structure |
| JP4159328B2 (en) | 2002-09-11 | 2008-10-01 | Ｎｅｃインフロンティア株式会社 | Network, IPsec setting server device, IPsec processing device, and IPsec setting method used therefor |
| US20040059943A1 (en) | 2002-09-23 | 2004-03-25 | Bertrand Marquet | Embedded filtering policy manager using system-on-chip |
| US7337241B2 (en) | 2002-09-27 | 2008-02-26 | Alacritech, Inc. | Fast-path apparatus for receiving data corresponding to a TCP connection |
| US7506360B1 (en) | 2002-10-01 | 2009-03-17 | Mirage Networks, Inc. | Tracking communication for determining device states |
| US7236457B2 (en) | 2002-10-04 | 2007-06-26 | Intel Corporation | Load balancing in a network |
| US7487248B2 (en) | 2002-10-08 | 2009-02-03 | Brian Moran | Method and system for transferring a computer session between devices |
| US7792113B1 (en) | 2002-10-21 | 2010-09-07 | Cisco Technology, Inc. | Method and system for policy-based forwarding |
| US7734745B2 (en)* | 2002-10-24 | 2010-06-08 | International Business Machines Corporation | Method and apparatus for maintaining internet domain name data |
| US7310686B2 (en) | 2002-10-27 | 2007-12-18 | Paxfire, Inc. | Apparatus and method for transparent selection of an Internet server based on geographic location of a user |
| US7406087B1 (en) | 2002-11-08 | 2008-07-29 | Juniper Networks, Inc. | Systems and methods for accelerating TCP/IP data stream processing |
| US7386889B2 (en) | 2002-11-18 | 2008-06-10 | Trusted Network Technologies, Inc. | System and method for intrusion prevention in a communications network |
| US7269348B1 (en) | 2002-11-18 | 2007-09-11 | At&T Corp. | Router having dual propagation paths for packets |
| US7584352B2 (en) | 2002-12-04 | 2009-09-01 | International Business Machines Corporation | Protection against denial of service attacks |
| US7945673B2 (en) | 2002-12-06 | 2011-05-17 | Hewlett-Packard Development Company, L.P. | Reduced wireless internet connect time |
| US7379958B2 (en) | 2002-12-30 | 2008-05-27 | Nokia Corporation | Automatic and dynamic service information delivery from service providers to data terminals in an access point network |
| US7234161B1 (en) | 2002-12-31 | 2007-06-19 | Nvidia Corporation | Method and apparatus for deflecting flooding attacks |
| US7269850B2 (en) | 2002-12-31 | 2007-09-11 | Intel Corporation | Systems and methods for detecting and tracing denial of service attacks |
| US6904439B2 (en) | 2002-12-31 | 2005-06-07 | International Business Machines Corporation | System and method for aggregating user project information in a multi-server system |
| US7194480B2 (en) | 2002-12-31 | 2007-03-20 | International Business Machines Corporation | System and method for invoking methods on place objects in a distributed environment |
| US7089231B2 (en) | 2002-12-31 | 2006-08-08 | International Business Machines Corporation | System and method for searching a plurality of databases distributed across a multi server domain |
| US20040143751A1 (en) | 2003-01-17 | 2004-07-22 | Cyrus Peikari | Protection of embedded processing systems with a configurable, integrated, embedded firewall |
| US7167874B2 (en) | 2003-01-22 | 2007-01-23 | International Business Machines Corporation | System and method for command line administration of project spaces using XML objects |
| US20040141005A1 (en) | 2003-01-22 | 2004-07-22 | International Business Machines Corporation | System and method for integrating online meeting materials in a place |
| US7835363B2 (en) | 2003-02-12 | 2010-11-16 | Broadcom Corporation | Method and system to provide blade server load balancing using spare link bandwidth |
| US7979694B2 (en) | 2003-03-03 | 2011-07-12 | Cisco Technology, Inc. | Using TCP to authenticate IP source addresses |
| US20040210623A1 (en) | 2003-03-06 | 2004-10-21 | Aamer Hydrie | Virtual network topology generation |
| WO2004084085A1 (en) | 2003-03-18 | 2004-09-30 | Fujitsu Limited | Load distributing system by intersite cooperation |
| US7895649B1 (en) | 2003-04-04 | 2011-02-22 | Raytheon Company | Dynamic rule generation for an enterprise intrusion detection system |
| US20040210663A1 (en) | 2003-04-15 | 2004-10-21 | Paul Phillips | Object-aware transport-layer network processing engine |
| US7308499B2 (en) | 2003-04-30 | 2007-12-11 | Avaya Technology Corp. | Dynamic load balancing for enterprise IP traffic |
| JP2004356816A (en) | 2003-05-28 | 2004-12-16 | Hitachi Ltd | Communication system, communication terminal, and operation program of communication terminal |
| US6982670B2 (en) | 2003-06-04 | 2006-01-03 | Farrokh Mohamadi | Phase management for beam-forming applications |
| US7181524B1 (en) | 2003-06-13 | 2007-02-20 | Veritas Operating Corporation | Method and apparatus for balancing a load among a plurality of servers in a computer system |
| US7636917B2 (en) | 2003-06-30 | 2009-12-22 | Microsoft Corporation | Network load balancing with host status information |
| US7590736B2 (en) | 2003-06-30 | 2009-09-15 | Microsoft Corporation | Flexible network load balancing |
| US7613822B2 (en) | 2003-06-30 | 2009-11-03 | Microsoft Corporation | Network load balancing with session information |
| US6988106B2 (en) | 2003-07-09 | 2006-01-17 | Cisco Technology, Inc. | Strong and searching a hierarchy of items of particular use with IP security policies and security associations |
| US20050027862A1 (en) | 2003-07-18 | 2005-02-03 | Nguyen Tien Le | System and methods of cooperatively load-balancing clustered servers |
| KR100568231B1 (en) | 2003-08-11 | 2006-04-07 | 삼성전자주식회사 | Domain Name Service System and Method |
| US7385923B2 (en) | 2003-08-14 | 2008-06-10 | International Business Machines Corporation | Method, system and article for improved TCP performance during packet reordering |
| CA2534448C (en) | 2003-08-14 | 2009-10-27 | Telcordia Technologies, Inc. | Auto-ip traffic optimization in mobile telecommunications systems |
| TWI225999B (en) | 2003-08-22 | 2005-01-01 | Ind Tech Res Inst | A method for searching Peer-based security policy database |
| US7467202B2 (en) | 2003-09-10 | 2008-12-16 | Fidelis Security Systems | High-performance network content analysis platform |
| CN100456690C (en) | 2003-10-14 | 2009-01-28 | 北京邮电大学 | Global load balancing method based on global network location |
| KR100570836B1 (en) | 2003-10-14 | 2006-04-13 | 한국전자통신연구원 | Load Balancer and Method Between Servers Using Load Balancing Session Labels |
| US7472190B2 (en) | 2003-10-17 | 2008-12-30 | International Business Machines Corporation | Method, system and program product for preserving a user state in an application |
| JP2005141441A (en) | 2003-11-06 | 2005-06-02 | Hitachi Ltd | Load balancing system |
| US20050108434A1 (en) | 2003-11-13 | 2005-05-19 | Witchey Nicholas J. | In-band firewall for an embedded system |
| US6996070B2 (en) | 2003-12-05 | 2006-02-07 | Alacritech, Inc. | TCP/IP offload device with reduced sequential processing |
| US20050125276A1 (en) | 2003-12-05 | 2005-06-09 | Grigore Rusu | System and method for event tracking across plural contact mediums |
| US7543052B1 (en) | 2003-12-22 | 2009-06-02 | Packeteer, Inc. | Automatic network traffic discovery and classification mechanism including dynamic discovery thresholds |
| US20050213586A1 (en) | 2004-02-05 | 2005-09-29 | David Cyganski | System and method to increase network throughput |
| US7881215B1 (en) | 2004-03-18 | 2011-02-01 | Avaya Inc. | Stateful and stateless data processing |
| US20050257093A1 (en) | 2004-04-21 | 2005-11-17 | Johnson Stephen L | Dynamic update of pluggable modules using a reference manager |
| US20050240989A1 (en) | 2004-04-23 | 2005-10-27 | Seoul National University Industry Foundation | Method of sharing state between stateful inspection firewalls on mep network |
| US20060112170A1 (en) | 2004-05-03 | 2006-05-25 | Craig Sirkin | Geo-locating load balancing |
| US20060064478A1 (en) | 2004-05-03 | 2006-03-23 | Level 3 Communications, Inc. | Geo-locating load balancing |
| US7584301B1 (en) | 2004-05-06 | 2009-09-01 | Foundry Networks, Inc. | Host-level policies for global server load balancing |
| US8423758B2 (en) | 2004-05-10 | 2013-04-16 | Tara Chand Singhal | Method and apparatus for packet source validation architecture system for enhanced internet security |
| US7391725B2 (en) | 2004-05-18 | 2008-06-24 | Christian Huitema | System and method for defeating SYN attacks |
| US8179786B2 (en) | 2004-05-19 | 2012-05-15 | Mosaid Technologies Incorporated | Dynamic traffic rearrangement and restoration for MPLS networks with differentiated services capabilities |
| US20060069774A1 (en) | 2004-06-17 | 2006-03-30 | International Business Machine Corporation | Method and apparatus for managing data center using Web services |
| FI20040888A0 (en) | 2004-06-28 | 2004-06-28 | Nokia Corp | Management of services in a packet switching data network |
| US8688834B2 (en) | 2004-07-09 | 2014-04-01 | Toshiba America Research, Inc. | Dynamic host configuration and network access authentication |
| CN1317853C (en) | 2004-07-20 | 2007-05-23 | 联想网御科技(北京)有限公司 | Network safety equipment and assemblied system and method for implementing high availability |
| JP4313266B2 (en) | 2004-07-29 | 2009-08-12 | 株式会社エヌ・ティ・ティ・ドコモ | Server apparatus, control method thereof and connection establishment method |
| TW200606667A (en) | 2004-08-13 | 2006-02-16 | Reallusion Inc | System and method of converting and sharing data |
| US7805367B2 (en) | 2004-08-17 | 2010-09-28 | Paymentech, L.P. | System and method for pricing of merchant accounts |
| US7423977B1 (en) | 2004-08-23 | 2008-09-09 | Foundry Networks Inc. | Smoothing algorithm for round trip time (RTT) measurements |
| JP4555025B2 (en) | 2004-08-25 | 2010-09-29 | 株式会社エヌ・ティ・ティ・ドコモ | Server device, client device, and process execution method |
| GB2418110B (en) | 2004-09-14 | 2006-09-06 | 3Com Corp | Method and apparatus for controlling traffic between different entities on a network |
| US7292592B2 (en) | 2004-10-08 | 2007-11-06 | Telefonaktiebolaget Lm Ericsson (Publ) | Home network-assisted selection of intermediary network for a roaming mobile terminal |
| US20060092950A1 (en) | 2004-10-28 | 2006-05-04 | Cisco Technology, Inc. | Architecture and method having redundancy in active/active stateful devices based on symmetric global load balancing protocol (sGLBP) |
| US20060098645A1 (en) | 2004-11-09 | 2006-05-11 | Lev Walkin | System and method for providing client identifying information to a server |
| US8458467B2 (en) | 2005-06-21 | 2013-06-04 | Cisco Technology, Inc. | Method and apparatus for adaptive application message payload content transformation in a network infrastructure element |
| US7634564B2 (en) | 2004-11-18 | 2009-12-15 | Nokia Corporation | Systems and methods for invoking a service from a plurality of event servers in a network |
| US7809131B1 (en) | 2004-12-23 | 2010-10-05 | Arcsight, Inc. | Adjusting sensor time in a network security system |
| TWI252976B (en) | 2004-12-27 | 2006-04-11 | Ind Tech Res Inst | Detecting method and architecture thereof for malicious codes |
| CN101147376A (en) | 2005-02-04 | 2008-03-19 | 诺基亚公司 | Apparatus, method and computer program product for reducing TCP flooding attacks while conserving wireless network bandwidth |
| US20060190997A1 (en) | 2005-02-22 | 2006-08-24 | Mahajani Amol V | Method and system for transparent in-line protection of an electronic communications network |
| US20060187901A1 (en) | 2005-02-23 | 2006-08-24 | Lucent Technologies Inc. | Concurrent dual-state proxy server, method of providing a proxy and SIP network employing the same |
| US8533473B2 (en) | 2005-03-04 | 2013-09-10 | Oracle America, Inc. | Method and apparatus for reducing bandwidth usage in secure transactions |
| US20060206586A1 (en) | 2005-03-09 | 2006-09-14 | Yibei Ling | Method, apparatus and system for a location-based uniform resource locator |
| US8656488B2 (en) | 2005-03-11 | 2014-02-18 | Trend Micro Incorporated | Method and apparatus for securing a computer network by multi-layer protocol scanning |
| JP4413965B2 (en) | 2005-03-17 | 2010-02-10 | 富士通株式会社 | Load balancing communication device and load balancing management device |
| KR101141645B1 (en) | 2005-03-29 | 2012-05-17 | 엘지전자 주식회사 | Method for Controlling Transmission of Data Block |
| US7606147B2 (en) | 2005-04-13 | 2009-10-20 | Zeugma Systems Inc. | Application aware traffic shaping service node positioned between the access and core networks |
| US7990847B1 (en) | 2005-04-15 | 2011-08-02 | Cisco Technology, Inc. | Method and system for managing servers in a server cluster |
| US7640591B1 (en) | 2005-04-22 | 2009-12-29 | Sun Microsystems, Inc. | Method and apparatus for limiting denial of service attack by limiting traffic for hosts |
| US7739736B1 (en) | 2005-04-22 | 2010-06-15 | Oracle America, Inc. | Method and apparatus for dynamically isolating affected services under denial of service attack |
| US7765591B2 (en) | 2005-05-05 | 2010-07-27 | Cisco Technology, Inc. | Method and system for prioritizing security operations in a communication network |
| KR100642935B1 (en) | 2005-05-06 | 2006-11-10 | (주)아이디스 | Name service system and method |
| US7826487B1 (en) | 2005-05-09 | 2010-11-02 | F5 Network, Inc | Coalescing acknowledgement responses to improve network communications |
| US7599289B2 (en) | 2005-05-13 | 2009-10-06 | Lockheed Martin Corporation | Electronic communication control |
| JP4101251B2 (en) | 2005-05-24 | 2008-06-18 | 富士通株式会社 | Load distribution program, load distribution method, and load distribution apparatus |
| US8200696B2 (en)* | 2005-05-26 | 2012-06-12 | International Business Machines Corporation | Presenting multiple possible selectable domain names from a URL entry |
| IES20050376A2 (en) | 2005-06-03 | 2006-08-09 | Asavie R & D Ltd | Secure network communication system and method |
| US20060277303A1 (en) | 2005-06-06 | 2006-12-07 | Nikhil Hegde | Method to improve response time when clients use network services |
| JP4557815B2 (en) | 2005-06-13 | 2010-10-06 | 富士通株式会社 | Relay device and relay system |
| US7636323B2 (en) | 2005-06-14 | 2009-12-22 | Broadcom Corporation | Method and system for handling connection setup in a network |
| US20060288411A1 (en) | 2005-06-21 | 2006-12-21 | Avaya, Inc. | System and method for mitigating denial of service attacks on communication appliances |
| US7774402B2 (en) | 2005-06-29 | 2010-08-10 | Visa U.S.A. | Adaptive gateway for switching transactions and data on unreliable networks using context-based rules |
| US7609625B2 (en) | 2005-07-06 | 2009-10-27 | Fortinet, Inc. | Systems and methods for detecting and preventing flooding attacks in a network environment |
| US7984493B2 (en)* | 2005-07-22 | 2011-07-19 | Alcatel-Lucent | DNS based enforcement for confinement and detection of network malicious activities |
| US7496566B2 (en) | 2005-08-03 | 2009-02-24 | Intenational Business Machines Corporation | Priority based LDAP service publication mechanism |
| US20070056038A1 (en) | 2005-09-06 | 2007-03-08 | Lok Technology, Inc. | Fusion instrusion protection system |
| EP1770915A1 (en) | 2005-09-29 | 2007-04-04 | Matsushita Electric Industrial Co., Ltd. | Policy control in the evolved system architecture |
| US20070086382A1 (en) | 2005-10-17 | 2007-04-19 | Vidya Narayanan | Methods of network access configuration in an IP network |
| JP4650203B2 (en) | 2005-10-20 | 2011-03-16 | 株式会社日立製作所 | Information system and management computer |
| US7606232B1 (en) | 2005-11-09 | 2009-10-20 | Juniper Networks, Inc. | Dynamic virtual local area network (VLAN) interface configuration |
| US7653633B2 (en) | 2005-11-12 | 2010-01-26 | Logrhythm, Inc. | Log collection, structuring and processing |
| US20070118881A1 (en) | 2005-11-18 | 2007-05-24 | Julian Mitchell | Application control at a policy server |
| US9686183B2 (en) | 2005-12-06 | 2017-06-20 | Zarbaña Digital Fund Llc | Digital object routing based on a service request |
| US7694011B2 (en) | 2006-01-17 | 2010-04-06 | Cisco Technology, Inc. | Techniques for load balancing over a cluster of subscriber-aware application servers |
| CN100452041C (en) | 2006-01-18 | 2009-01-14 | 腾讯科技（深圳）有限公司 | Method and system for reading information at network resource site, and searching engine |
| US7610622B2 (en) | 2006-02-06 | 2009-10-27 | Cisco Technology, Inc. | Supporting options in a communication session using a TCP cookie |
| US7580974B2 (en) | 2006-02-16 | 2009-08-25 | Fortinet, Inc. | Systems and methods for content type classification |
| US7675854B2 (en) | 2006-02-21 | 2010-03-09 | A10 Networks, Inc. | System and method for an adaptive TCP SYN cookie with time validation |
| US7492766B2 (en) | 2006-02-22 | 2009-02-17 | Juniper Networks, Inc. | Dynamic building of VLAN interfaces based on subscriber information strings |
| US7808994B1 (en) | 2006-02-22 | 2010-10-05 | Juniper Networks, Inc. | Forwarding traffic to VLAN interfaces built based on subscriber information strings |
| US8832247B2 (en) | 2006-03-24 | 2014-09-09 | Blue Coat Systems, Inc. | Methods and systems for caching content at multiple levels |
| JP5108244B2 (en) | 2006-03-30 | 2012-12-26 | 株式会社エヌ・ティ・ティ・ドコモ | Communication terminal and retransmission control method |
| US8539075B2 (en) | 2006-04-21 | 2013-09-17 | International Business Machines Corporation | On-demand global server load balancing system and method of use |
| US7680478B2 (en) | 2006-05-04 | 2010-03-16 | Telefonaktiebolaget Lm Ericsson (Publ) | Inactivity monitoring for different traffic or service classifications |
| KR100830413B1 (en) | 2006-05-25 | 2008-05-20 | (주)씨디네트웍스 | Server access system for clients and load balancing network system including the same |
| US20070283429A1 (en) | 2006-05-30 | 2007-12-06 | A10 Networks Inc. | Sequence number based TCP session proxy |
| GB0611249D0 (en) | 2006-06-07 | 2006-07-19 | Nokia Corp | Communication system |
| US20070288247A1 (en) | 2006-06-11 | 2007-12-13 | Michael Mackay | Digital life server |
| US20070294209A1 (en) | 2006-06-20 | 2007-12-20 | Lyle Strub | Communication network application activity monitoring and control |
| EP2060087A1 (en) | 2006-07-03 | 2009-05-20 | Telefonaktiebolaget L M Ericsson (Publ) | Topology hiding of mobile agents |
| US7970934B1 (en) | 2006-07-31 | 2011-06-28 | Google Inc. | Detecting events of interest |
| EP1885096B1 (en) | 2006-08-01 | 2012-07-04 | Alcatel Lucent | Application session border element |
| JP4916809B2 (en) | 2006-08-04 | 2012-04-18 | 日本電信電話株式会社 | Load balancing control apparatus and method |
| US7580417B2 (en) | 2006-08-07 | 2009-08-25 | Cisco Technology, Inc. | Method and apparatus for load balancing over virtual network links |
| US8332925B2 (en) | 2006-08-08 | 2012-12-11 | A10 Networks, Inc. | System and method for distributed multi-processing security gateway |
| US8079077B2 (en) | 2006-08-08 | 2011-12-13 | A10 Networks, Inc. | System and method for distributed multi-processing security gateway |
| US7716378B2 (en) | 2006-10-17 | 2010-05-11 | A10 Networks, Inc. | System and method to associate a private user identity with a public user identity |
| US8312507B2 (en) | 2006-10-17 | 2012-11-13 | A10 Networks, Inc. | System and method to apply network traffic policy to an application session |
| US8584199B1 (en) | 2006-10-17 | 2013-11-12 | A10 Networks, Inc. | System and method to apply a packet routing policy to an application session |
| JP4680866B2 (en) | 2006-10-31 | 2011-05-11 | 株式会社日立製作所 | Packet transfer device with gateway load balancing function |
| US8149807B2 (en) | 2006-11-01 | 2012-04-03 | Panasonic Corporation | Communication control method, communication system, home agent allocation server, and mobile node |
| US8584195B2 (en) | 2006-11-08 | 2013-11-12 | Mcafee, Inc | Identities correlation infrastructure for passive network monitoring |
| CN101193089B (en) | 2006-11-20 | 2010-11-03 | 阿里巴巴集团控股有限公司 | Stateful session system and its realization method |
| CN101094225B (en) | 2006-11-24 | 2011-05-11 | 中兴通讯股份有限公司 | Network, system and method of differentiated security service |
| US7974286B2 (en) | 2006-12-04 | 2011-07-05 | International Business Machines Corporation | Reduced redundant security screening |
| WO2008078593A1 (en) | 2006-12-22 | 2008-07-03 | International Business Machines Corporation | Message hub, program, and method |
| US7992192B2 (en) | 2006-12-29 | 2011-08-02 | Ebay Inc. | Alerting as to denial of service attacks |
| FR2911234B1 (en) | 2007-01-05 | 2009-02-20 | Thales Sa | METHOD OF SENDING DATA PACKETS FROM A SERVER TO A CUSTOMER, THE CLIENT USING SIMULTANEOUSLY A CONSTANT RATE OF DATA THAT HAS RECEIVED |
| JP5023715B2 (en) | 2007-01-25 | 2012-09-12 | 富士ゼロックス株式会社 | Information processing system, information processing apparatus, and program |
| US8379515B1 (en) | 2007-02-01 | 2013-02-19 | F5 Networks, Inc. | TCP throughput control by imposing temporal delay |
| JP5377337B2 (en) | 2007-03-09 | 2013-12-25 | セキュア６４・ソフトウェア・コーポレイション | Server computer |
| CN100531098C (en) | 2007-03-13 | 2009-08-19 | 华为技术有限公司 | Point-to-point network system and intercommunicating method for overlapped network node |
| US20080229418A1 (en) | 2007-03-14 | 2008-09-18 | A10 Networks Inc. | System and Method to Customize a Security Log Analyzer |
| CN101277257B (en)* | 2007-03-26 | 2012-02-01 | 华为技术有限公司 | Method, device and system for DNS dynamic update |
| US8352634B2 (en) | 2007-04-06 | 2013-01-08 | International Business Machines Corporation | On-demand propagation of routing information in distributed computing system |
| US7743155B2 (en) | 2007-04-20 | 2010-06-22 | Array Networks, Inc. | Active-active operation for a cluster of SSL virtual private network (VPN) devices with load distribution |
| US20080271130A1 (en) | 2007-04-30 | 2008-10-30 | Shankar Ramamoorthy | Minimizing client-side inconsistencies in a distributed virtual file system |
| US9143558B2 (en) | 2007-05-09 | 2015-09-22 | Radware, Ltd. | Geographic resiliency and load balancing for SIP application services |
| US20080291911A1 (en) | 2007-05-21 | 2008-11-27 | Ist International, Inc. | Method and apparatus for setting a TCP retransmission timer |
| US8191106B2 (en) | 2007-06-07 | 2012-05-29 | Alcatel Lucent | System and method of network access security policy management for multimodal device |
| US7743157B2 (en) | 2007-06-26 | 2010-06-22 | Sap Ag | System and method for switching between stateful and stateless communication modes |
| US8032632B2 (en)* | 2007-08-14 | 2011-10-04 | Microsoft Corporation | Validating change of name server |
| CN101388901B (en)* | 2007-09-14 | 2011-07-20 | 电信科学技术研究院 | Method and system for supporting customer static IP addressing in long term evolution system |
| US9407693B2 (en) | 2007-10-03 | 2016-08-02 | Microsoft Technology Licensing, Llc | Network routing of endpoints to content based on content swarms |
| US8553537B2 (en) | 2007-11-09 | 2013-10-08 | International Business Machines Corporation | Session-less load balancing of client traffic across servers in a server group |
| CN101163336B (en) | 2007-11-15 | 2010-06-16 | 中兴通讯股份有限公司 | Method of implementing mobile phone terminal access authority authentication |
| CN101442436A (en)* | 2007-11-20 | 2009-05-27 | 国际商业机器公司 | IP network management method and system |
| CN101169785A (en) | 2007-11-21 | 2008-04-30 | 浪潮电子信息产业股份有限公司 | A Dynamic Load Balancing Method for Cluster Database System |
| WO2009070775A2 (en) | 2007-11-26 | 2009-06-04 | Feeva Technology, Inc. | Systems and methods of information/network processing consistent with creation, encryption and/or insertion of uids/tags |
| GB0723422D0 (en) | 2007-11-29 | 2008-01-09 | Level 5 Networks Inc | Virtualised receive side scaling |
| US8125908B2 (en) | 2007-12-04 | 2012-02-28 | Extrahop Networks, Inc. | Adaptive network traffic classification using historical context |
| US8037532B2 (en) | 2007-12-11 | 2011-10-11 | International Business Machines Corporation | Application protection from malicious network traffic |
| US8756340B2 (en) | 2007-12-20 | 2014-06-17 | Yahoo! Inc. | DNS wildcard beaconing to determine client location and resolver load for global traffic load balancing |
| JP5296373B2 (en) | 2007-12-26 | 2013-09-25 | インターナショナル・ビジネス・マシーンズ・コーポレーション | Technology that provides processing time in advance |
| US9100268B2 (en) | 2008-02-27 | 2015-08-04 | Alcatel Lucent | Application-aware MPLS tunnel selection |
| US7930427B2 (en) | 2008-03-03 | 2011-04-19 | Microsoft Corporation | Client-side load balancing |
| US7991879B2 (en)* | 2008-03-03 | 2011-08-02 | Microsoft Corporation | Internet location coordinate enhanced domain name system |
| JP2009211343A (en) | 2008-03-04 | 2009-09-17 | Kddi Corp | Server device and communication system |
| US8185628B2 (en)* | 2008-03-07 | 2012-05-22 | At&T Mobility Ii Llc | Enhanced policy capabilities for mobile data services |
| CN101247349A (en) | 2008-03-13 | 2008-08-20 | 华耀环宇科技（北京）有限公司 | Network flux fast distribution method |
| WO2009116948A1 (en)* | 2008-03-20 | 2009-09-24 | Telefonaktiebolaget Lm Ericsson (Publ) | Method and apparatus for communication of data packets between local networks |
| US9264441B2 (en) | 2008-03-24 | 2016-02-16 | Hewlett Packard Enterprise Development Lp | System and method for securing a network from zero-day vulnerability exploits |
| CN101547189B (en) | 2008-03-28 | 2011-08-10 | 华为技术有限公司 | Method, system and device for establishing CoD service |
| US7886021B2 (en) | 2008-04-28 | 2011-02-08 | Oracle America, Inc. | System and method for programmatic management of distributed computing resources |
| CN101577661B (en) | 2008-05-09 | 2013-09-11 | 华为技术有限公司 | Method and equipment for switching path |
| US8239670B1 (en) | 2008-05-13 | 2012-08-07 | Adobe Systems Incorporated | Multi-aspect identifier in network protocol handshake |
| US8780738B2 (en)* | 2008-05-15 | 2014-07-15 | At&T Intellectual Property I, L.P. | Method and apparatus for supporting enterprise addressing in networks |
| US8352594B2 (en) | 2008-06-12 | 2013-01-08 | Panasonic Corporation | Network monitoring device, bus system monitoring device, method and program |
| US7990855B2 (en) | 2008-07-11 | 2011-08-02 | Alcatel-Lucent Usa Inc. | Method and system for joint reverse link access and traffic channel radio frequency overload control |
| CN101631065B (en) | 2008-07-16 | 2012-04-18 | 华为技术有限公司 | Method and device for controlling congestion of wireless multi-hop network |
| US8271652B2 (en) | 2008-07-24 | 2012-09-18 | Netapp, Inc. | Load-derived probability-based domain name service in a network storage cluster |
| US7890632B2 (en) | 2008-08-11 | 2011-02-15 | International Business Machines Corporation | Load balancing using replication delay |
| US8307422B2 (en) | 2008-08-14 | 2012-11-06 | Juniper Networks, Inc. | Routing device having integrated MPLS-aware firewall |
| US8220056B2 (en) | 2008-09-23 | 2012-07-10 | Savvis, Inc. | Threat management system and method |
| JP5211987B2 (en) | 2008-09-26 | 2013-06-12 | ブラザー工業株式会社 | Terminal device and time adjustment method thereof |
| JP5557840B2 (en) | 2008-10-03 | 2014-07-23 | テレフオンアクチーボラゲット エル エム エリクソン（パブル） | Distributed database monitoring mechanism |
| US7958247B2 (en) | 2008-10-14 | 2011-06-07 | Hewlett-Packard Development Company, L.P. | HTTP push to simulate server-initiated sessions |
| US8266288B2 (en)* | 2008-10-23 | 2012-09-11 | International Business Machines Corporation | Dynamic expiration of domain name service entries |
| US20100106854A1 (en) | 2008-10-29 | 2010-04-29 | Hostway Corporation | System and method for controlling non-existing domain traffic |
| JP2010108409A (en) | 2008-10-31 | 2010-05-13 | Hitachi Ltd | Storage management method and management server |
| US8359402B2 (en) | 2008-11-19 | 2013-01-22 | Seachange International, Inc. | Intercept device for providing content |
| US8260926B2 (en) | 2008-11-25 | 2012-09-04 | Citrix Systems, Inc. | Systems and methods for GSLB site persistence |
| US8125911B2 (en) | 2008-11-26 | 2012-02-28 | Cisco Technology, Inc. | First-hop domain reliability measurement and load balancing in a computer network |
| US8844018B2 (en) | 2008-12-18 | 2014-09-23 | At&T Intellectual Property I, L.P. | Methods and apparatus to enhance security in residential networks |
| US8448245B2 (en) | 2009-01-17 | 2013-05-21 | Stopthehacker.com, Jaal LLC | Automated identification of phishing, phony and malicious web sites |
| US9165064B2 (en) | 2009-01-27 | 2015-10-20 | Apple Inc. | Context-aware prompts and alerts in a note-sharing system |
| US9112871B2 (en) | 2009-02-17 | 2015-08-18 | Core Wireless Licensing S.A.R.L | Method and apparatus for providing shared services |
| US8364163B2 (en) | 2009-02-23 | 2013-01-29 | Research In Motion Limited | Method, system and apparatus for connecting a plurality of client machines to a plurality of servers |
| US20100228819A1 (en) | 2009-03-05 | 2010-09-09 | Yottaa Inc | System and method for performance acceleration, data protection, disaster recovery and on-demand scaling of computer applications |
| CN101834777B (en) | 2009-03-11 | 2015-07-29 | 瞻博网络公司 | The HTTP of dialogue-based high-speed cache accelerates |
| EP2234333B1 (en) | 2009-03-23 | 2015-07-15 | Corvil Limited | System and method for estimation of round trip times within a tcp based data network |
| US8289981B1 (en) | 2009-04-29 | 2012-10-16 | Trend Micro Incorporated | Apparatus and method for high-performance network content processing |
| US7957319B2 (en) | 2009-05-08 | 2011-06-07 | Blue Coat Systems, Inc. | Classification techniques for encrypted network traffic |
| US8428964B2 (en) | 2009-05-11 | 2013-04-23 | Healthocity, Inc. A Delaware Corporation | System and method for matching healthcare providers with consumers |
| US8296434B1 (en) | 2009-05-28 | 2012-10-23 | Amazon Technologies, Inc. | Providing dynamically scaling computing load balancing |
| US8259726B2 (en) | 2009-05-28 | 2012-09-04 | Force10 Networks, Inc. | Method and apparatus for forwarding table reduction |
| US8266088B2 (en) | 2009-06-09 | 2012-09-11 | Cisco Technology, Inc. | Tracking policy decisions in a network |
| WO2010142335A1 (en) | 2009-06-10 | 2010-12-16 | Telefonaktiebolaget Lm Ericsson (Publ) | Performance monitoring in a communication network |
| US8060579B2 (en) | 2009-06-12 | 2011-11-15 | Yahoo! Inc. | User location dependent DNS lookup |
| US8289975B2 (en) | 2009-06-22 | 2012-10-16 | Citrix Systems, Inc. | Systems and methods for handling a multi-connection protocol between a client and server traversing a multi-core system |
| US8863111B2 (en) | 2009-06-26 | 2014-10-14 | Oracle International Corporation | System and method for providing a production upgrade of components within a multiprotocol gateway |
| US8478708B1 (en) | 2009-07-30 | 2013-07-02 | Zscaler, Inc. | System and method for determining risk posed by a web user |
| US9749387B2 (en) | 2009-08-13 | 2017-08-29 | Sap Se | Transparently stateful execution of stateless applications |
| KR100965452B1 (en) | 2009-10-16 | 2010-06-24 | 서울대학교산학협력단 | An internet application traffic classification and benchmarks framework |
| US9960967B2 (en) | 2009-10-21 | 2018-05-01 | A10 Networks, Inc. | Determining an application delivery server based on geo-location information |
| WO2011049135A1 (en) | 2009-10-23 | 2011-04-28 | 日本電気株式会社 | Network system, control method thereof, and controller |
| JP5378946B2 (en) | 2009-10-26 | 2013-12-25 | 株式会社日立製作所 | Server management apparatus and server management method |
| US8311014B2 (en) | 2009-11-06 | 2012-11-13 | Telefonaktiebolaget L M Ericsson (Publ) | Virtual care-of address for mobile IP (internet protocol) |
| CN102714657B (en) | 2009-11-25 | 2015-02-04 | 思杰系统有限公司 | Systems and methods for client IP address insertion via TCP options |
| KR101263329B1 (en) | 2009-12-02 | 2013-05-16 | 한국전자통신연구원 | Method and apparatus for preventing network attacks, method and apparatus for processing transmission and receipt of packet comprising the same |
| US8190736B2 (en) | 2009-12-16 | 2012-05-29 | Quantum Corporation | Reducing messaging in a client-server system |
| US8335853B2 (en) | 2009-12-17 | 2012-12-18 | Sonus Networks, Inc. | Transparent recovery of transport connections using packet translation techniques |
| US8255528B2 (en) | 2009-12-23 | 2012-08-28 | Citrix Systems, Inc. | Systems and methods for GSLB spillover |
| US7991859B1 (en) | 2009-12-28 | 2011-08-02 | Amazon Technologies, Inc. | Using virtual networking devices to connect managed computer networks |
| US8224971B1 (en) | 2009-12-28 | 2012-07-17 | Amazon Technologies, Inc. | Using virtual networking devices and routing information to initiate external actions |
| WO2011079381A1 (en) | 2009-12-31 | 2011-07-07 | Bce Inc. | Method and system for increasing performance of transmission control protocol sessions in data networks |
| CN102025794B (en)* | 2010-01-22 | 2013-07-17 | 中国移动通信集团北京有限公司 | Domain name resolution method, DNS (Domain Name Server) server and system |
| US8800034B2 (en) | 2010-01-26 | 2014-08-05 | Bank Of America Corporation | Insider threat correlation tool |
| US8789061B2 (en) | 2010-02-01 | 2014-07-22 | Ca, Inc. | System and method for datacenter power management |
| US8301786B2 (en) | 2010-02-10 | 2012-10-30 | Cisco Technology, Inc. | Application session control using packet inspection |
| US8804513B2 (en) | 2010-02-25 | 2014-08-12 | The Trustees Of Columbia University In The City Of New York | Methods and systems for controlling SIP overload |
| US8582454B2 (en) | 2010-04-08 | 2013-11-12 | Netscout Systems, Inc. | Real-time adaptive processing of network data packets for analysis |
| JP5557590B2 (en) | 2010-05-06 | 2014-07-23 | 株式会社日立製作所 | Load balancing apparatus and system |
| US8533337B2 (en) | 2010-05-06 | 2013-09-10 | Citrix Systems, Inc. | Continuous upgrading of computers in a load balanced environment |
| US8499093B2 (en) | 2010-05-14 | 2013-07-30 | Extreme Networks, Inc. | Methods, systems, and computer readable media for stateless load balancing of network traffic flows |
| US20110289496A1 (en) | 2010-05-18 | 2011-11-24 | North End Technologies, Inc. | Method & apparatus for load balancing software update across a plurality of publish/subscribe capable client devices |
| US8539068B2 (en) | 2010-06-07 | 2013-09-17 | Salesforce.Com, Inc. | Methods and systems for providing customized domain messages |
| US20110307541A1 (en) | 2010-06-10 | 2011-12-15 | Microsoft Corporation | Server load balancing and draining in enhanced communication systems |
| US9680750B2 (en) | 2010-07-06 | 2017-06-13 | Nicira, Inc. | Use of tunnels to hide network addresses |
| US8837493B2 (en) | 2010-07-06 | 2014-09-16 | Nicira, Inc. | Distributed network control apparatus and method |
| EP2591573B1 (en) | 2010-07-09 | 2017-06-14 | Telefonaktiebolaget LM Ericsson (publ) | Method and apparatus for traffic classification |
| US9363312B2 (en) | 2010-07-28 | 2016-06-07 | International Business Machines Corporation | Transparent header modification for reducing serving load based on current and projected usage |
| US8520672B2 (en) | 2010-07-29 | 2013-08-27 | Cisco Technology, Inc. | Packet switching device using results determined by an application node |
| US8990380B2 (en) | 2010-08-12 | 2015-03-24 | Citrix Systems, Inc. | Systems and methods for quality of service of ICA published applications |
| US8675488B1 (en) | 2010-09-07 | 2014-03-18 | Juniper Networks, Inc. | Subscriber-based network traffic management |
| US8949410B2 (en) | 2010-09-10 | 2015-02-03 | Cisco Technology, Inc. | Server load balancer scaling for virtual servers |
| US9215275B2 (en) | 2010-09-30 | 2015-12-15 | A10 Networks, Inc. | System and method to balance servers based on server load status |
| US20120084460A1 (en) | 2010-10-04 | 2012-04-05 | Openwave Systems Inc. | Method and system for dynamic traffic steering |
| US9141710B2 (en) | 2010-10-27 | 2015-09-22 | International Business Machines Corporation | Persisting annotations within a cobrowsing session |
| US9237194B2 (en) | 2010-11-05 | 2016-01-12 | Verizon Patent And Licensing Inc. | Load balancer and firewall self-provisioning system |
| US8533285B2 (en) | 2010-12-01 | 2013-09-10 | Cisco Technology, Inc. | Directing data flows in data centers with clustering services |
| US9609052B2 (en) | 2010-12-02 | 2017-03-28 | A10 Networks, Inc. | Distributing application traffic to servers based on dynamic service response time |
| EP2649858B1 (en) | 2010-12-07 | 2018-09-19 | Telefonaktiebolaget LM Ericsson (publ) | Method for enabling traffic acceleration in a mobile telecommunication network |
| US9152293B2 (en) | 2010-12-09 | 2015-10-06 | Verizon Patent And Licensing Inc. | Server IP addressing in a computing-on-demand system |
| US8965957B2 (en) | 2010-12-15 | 2015-02-24 | Sap Se | Service delivery framework |
| US8755283B2 (en) | 2010-12-17 | 2014-06-17 | Microsoft Corporation | Synchronizing state among load balancer components |
| WO2012092269A1 (en) | 2010-12-29 | 2012-07-05 | Citrix Systems, Inc. | Systems and methods for policy based integration to horizontally deployed wan optimization appliances |
| US20120174196A1 (en) | 2010-12-30 | 2012-07-05 | Suresh Bhogavilli | Active validation for ddos and ssl ddos attacks |
| US8477730B2 (en) | 2011-01-04 | 2013-07-02 | Cisco Technology, Inc. | Distributed load management on network devices |
| JP5948345B2 (en) | 2011-01-11 | 2016-07-06 | エイ１０ ネットワークス インコーポレイテッドＡ１０ Ｎｅｔｗｏｒｋｓ， Ｉｎｃ． | Virtual application delivery chassis system |
| CN107967602A (en) | 2011-03-04 | 2018-04-27 | 维萨国际服务协会 | Ability to pay is bound to the safety element of computer |
| US8732267B2 (en) | 2011-03-15 | 2014-05-20 | Cisco Technology, Inc. | Placement of a cloud service using network topology and infrastructure performance |
| CN102143075B (en) | 2011-03-28 | 2013-08-07 | 中国人民解放军国防科学技术大学 | Method and system for achieving load balance |
| US9397949B2 (en) | 2011-04-18 | 2016-07-19 | Nec Corporation | Terminal, control device, communication method, communication system, communication module, program, and information processing device |
| US9060038B2 (en)* | 2011-05-16 | 2015-06-16 | At&T Intellectual Property I, L.P. | Dynamic domain name server console for disaster recovery server management |
| US9154577B2 (en) | 2011-06-06 | 2015-10-06 | A10 Networks, Inc. | Sychronization of configuration file of virtual application distribution chassis |
| US8478890B2 (en) | 2011-07-15 | 2013-07-02 | Damaka, Inc. | System and method for reliable virtual bi-directional data stream communications with single socket point-to-multipoint capability |
| US8804620B2 (en) | 2011-10-04 | 2014-08-12 | Juniper Networks, Inc. | Methods and apparatus for enforcing a common user policy within a network |
| US8885463B1 (en) | 2011-10-17 | 2014-11-11 | Juniper Networks, Inc. | Path computation element communication protocol (PCEP) extensions for stateful label switched path management |
| US8897154B2 (en) | 2011-10-24 | 2014-11-25 | A10 Networks, Inc. | Combining stateless and stateful server load balancing |
| US8918501B2 (en) | 2011-11-10 | 2014-12-23 | Microsoft Corporation | Pattern-based computational health and configuration monitoring |
| EP2749118B1 (en) | 2011-11-23 | 2018-01-10 | Telefonaktiebolaget LM Ericsson (publ) | Improving tcp performance in a cellular network |
| US8549612B2 (en) | 2011-11-28 | 2013-10-01 | Dell Products, Lp | System and method for incorporating quality-of-service and reputation in an intrusion detection and prevention system |
| US9386088B2 (en) | 2011-11-29 | 2016-07-05 | A10 Networks, Inc. | Accelerating service processing using fast path TCP |
| US20150088597A1 (en) | 2011-12-02 | 2015-03-26 | Tailored Solutions and Consulting, Inc. | Method, system, and apparatus for managing corporate risk |
| US9094364B2 (en) | 2011-12-23 | 2015-07-28 | A10 Networks, Inc. | Methods to manage services over a service gateway |
| US8874790B2 (en)* | 2011-12-30 | 2014-10-28 | Verisign, Inc. | DNS package in a partitioned network |
| US9380635B2 (en) | 2012-01-09 | 2016-06-28 | Google Technology Holdings LLC | Dynamic TCP layer optimization for real-time field performance |
| US8595845B2 (en) | 2012-01-19 | 2013-11-26 | Mcafee, Inc. | Calculating quantitative asset risk |
| JP2013152095A (en) | 2012-01-24 | 2013-08-08 | Sony Corp | Time control device, time control method and program |
| US10044582B2 (en) | 2012-01-28 | 2018-08-07 | A10 Networks, Inc. | Generating secure name records |
| KR101348739B1 (en) | 2012-02-22 | 2014-01-08 | 유대영 | LED Lighting apparatus and LED Lighting system having the same |
| US9386128B2 (en) | 2012-03-23 | 2016-07-05 | Qualcomm Incorporated | Delay based active queue management for uplink traffic in user equipment |
| WO2013158098A1 (en) | 2012-04-19 | 2013-10-24 | Empire Technology Development Llc | Migration in place |
| US9027129B1 (en) | 2012-04-30 | 2015-05-05 | Brocade Communications Systems, Inc. | Techniques for protecting against denial of service attacks |
| US20140006508A1 (en) | 2012-06-27 | 2014-01-02 | Jean-Philippe Goyet | Method and system for real time subscriber profiling |
| US8813228B2 (en) | 2012-06-29 | 2014-08-19 | Deloitte Development Llc | Collective threat intelligence gathering system |
| US8782221B2 (en) | 2012-07-05 | 2014-07-15 | A10 Networks, Inc. | Method to allocate buffer for TCP proxy session based on dynamic network conditions |
| US9215208B2 (en) | 2012-08-17 | 2015-12-15 | The Keyw Corporation | Network attack offensive appliance |
| US9641650B2 (en) | 2012-08-23 | 2017-05-02 | Telefonaktiebolaget Lm Ericsson (Publ) | TCP proxy server |
| US10002141B2 (en) | 2012-09-25 | 2018-06-19 | A10 Networks, Inc. | Distributed database in software driven networks |
| US9106561B2 (en) | 2012-12-06 | 2015-08-11 | A10 Networks, Inc. | Configuration of a virtual service network |
| US9843484B2 (en) | 2012-09-25 | 2017-12-12 | A10 Networks, Inc. | Graceful scaling in software driven networks |
| KR101692751B1 (en) | 2012-09-25 | 2017-01-04 | 에이10 네트워크스, 인코포레이티드 | Load distribution in data networks |
| US10021174B2 (en) | 2012-09-25 | 2018-07-10 | A10 Networks, Inc. | Distributing service sessions |
| US20140137190A1 (en) | 2012-11-09 | 2014-05-15 | Rapid7, Inc. | Methods and systems for passively detecting security levels in client devices |
| US9338225B2 (en) | 2012-12-06 | 2016-05-10 | A10 Networks, Inc. | Forwarding policies on a virtual service network |
| US9531846B2 (en) | 2013-01-23 | 2016-12-27 | A10 Networks, Inc. | Reducing buffer usage for TCP proxy session based on delayed acknowledgement |
| US9900252B2 (en) | 2013-03-08 | 2018-02-20 | A10 Networks, Inc. | Application delivery controller and global server load balancer |
| US20140258465A1 (en) | 2013-03-11 | 2014-09-11 | Cisco Technology, Inc. | Identification of originating ip address and client port connection to a web server via a proxy server |
| US9614865B2 (en) | 2013-03-15 | 2017-04-04 | Mcafee, Inc. | Server-assisted anti-malware client |
| US9722918B2 (en) | 2013-03-15 | 2017-08-01 | A10 Networks, Inc. | System and method for customizing the identification of application or content type |
| WO2014144837A1 (en) | 2013-03-15 | 2014-09-18 | A10 Networks, Inc. | Processing data packets using a policy based network path |
| US9912555B2 (en) | 2013-03-15 | 2018-03-06 | A10 Networks, Inc. | System and method of updating modules for application or content identification |
| US9645811B2 (en) | 2013-04-01 | 2017-05-09 | Oc Acquisition Llc | Fault tolerance for a distributed computing system |
| WO2014176461A1 (en) | 2013-04-25 | 2014-10-30 | A10 Networks, Inc. | Systems and methods for network access control |
| US10038693B2 (en) | 2013-05-03 | 2018-07-31 | A10 Networks, Inc. | Facilitating secure network traffic by an application delivery controller |
| US9225638B2 (en) | 2013-05-09 | 2015-12-29 | Vmware, Inc. | Method and system for service switching using service tags |
| US9319476B2 (en) | 2013-05-28 | 2016-04-19 | Verizon Patent And Licensing Inc. | Resilient TCP splicing for proxy services |
| US10284570B2 (en) | 2013-07-24 | 2019-05-07 | Wells Fargo Bank, National Association | System and method to detect threats to computer based devices and systems |
| US10230770B2 (en) | 2013-12-02 | 2019-03-12 | A10 Networks, Inc. | Network proxy layer for policy-based application proxies |
| US8832832B1 (en) | 2014-01-03 | 2014-09-09 | Palantir Technologies Inc. | IP reputation |
| US9942152B2 (en) | 2014-03-25 | 2018-04-10 | A10 Networks, Inc. | Forwarding data packets using a service-based forwarding policy |
| US9942162B2 (en) | 2014-03-31 | 2018-04-10 | A10 Networks, Inc. | Active application response delay time |
| US9917851B2 (en) | 2014-04-28 | 2018-03-13 | Sophos Limited | Intrusion detection using a heartbeat |
| US9906422B2 (en) | 2014-05-16 | 2018-02-27 | A10 Networks, Inc. | Distributed system to determine a server's health |
| US9986061B2 (en) | 2014-06-03 | 2018-05-29 | A10 Networks, Inc. | Programming a data network device using user defined scripts |
| US10129122B2 (en) | 2014-06-03 | 2018-11-13 | A10 Networks, Inc. | User defined objects for network devices |
- 2012
- 2012-01-28USUS13/360,697patent/US10044582B2/enactiveActive
- 2013
- 2013-01-23CNCN201710698508.7Apatent/CN107580029B/enactiveActive
- 2013-01-23WOPCT/US2013/022607patent/WO2013112492A1/enactiveApplication Filing
- 2013-01-23CNCN201380006961.7Apatent/CN104106241B/enactiveActive
- 2018
- 2018-08-01USUS16/052,396patent/US10904119B2/enactiveActive
Cited By (71)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| USRE47296E1 (en) | 2006-02-21 | 2019-03-12 | A10 Networks, Inc. | System and method for an adaptive TCP SYN cookie with time validation |
| US9497201B2 (en) | 2006-10-17 | 2016-11-15 | A10 Networks, Inc. | Applying security policy to an application session |
| US9219751B1 (en) | 2006-10-17 | 2015-12-22 | A10 Networks, Inc. | System and method to apply forwarding policy to an application session |
| US9253152B1 (en) | 2006-10-17 | 2016-02-02 | A10 Networks, Inc. | Applying a packet routing policy to an application session |
| US9270705B1 (en) | 2006-10-17 | 2016-02-23 | A10 Networks, Inc. | Applying security policy to an application session |
| US9960967B2 (en) | 2009-10-21 | 2018-05-01 | A10 Networks, Inc. | Determining an application delivery server based on geo-location information |
| US10735267B2 (en) | 2009-10-21 | 2020-08-04 | A10 Networks, Inc. | Determining an application delivery server based on geo-location information |
| US10447775B2 (en) | 2010-09-30 | 2019-10-15 | A10 Networks, Inc. | System and method to balance servers based on server load status |
| US9215275B2 (en) | 2010-09-30 | 2015-12-15 | A10 Networks, Inc. | System and method to balance servers based on server load status |
| US9961135B2 (en) | 2010-09-30 | 2018-05-01 | A10 Networks, Inc. | System and method to balance servers based on server load status |
| US10178165B2 (en) | 2010-12-02 | 2019-01-08 | A10 Networks, Inc. | Distributing application traffic to servers based on dynamic service response time |
| US9609052B2 (en) | 2010-12-02 | 2017-03-28 | A10 Networks, Inc. | Distributing application traffic to servers based on dynamic service response time |
| US9961136B2 (en) | 2010-12-02 | 2018-05-01 | A10 Networks, Inc. | Distributing application traffic to servers based on dynamic service response time |
| US10484465B2 (en) | 2011-10-24 | 2019-11-19 | A10 Networks, Inc. | Combining stateless and stateful server load balancing |
| US9906591B2 (en) | 2011-10-24 | 2018-02-27 | A10 Networks, Inc. | Combining stateless and stateful server load balancing |
| US9270774B2 (en) | 2011-10-24 | 2016-02-23 | A10 Networks, Inc. | Combining stateless and stateful server load balancing |
| US9386088B2 (en) | 2011-11-29 | 2016-07-05 | A10 Networks, Inc. | Accelerating service processing using fast path TCP |
| US9979801B2 (en) | 2011-12-23 | 2018-05-22 | A10 Networks, Inc. | Methods to manage services over a service gateway |
| US9094364B2 (en) | 2011-12-23 | 2015-07-28 | A10 Networks, Inc. | Methods to manage services over a service gateway |
| US8977749B1 (en) | 2012-07-05 | 2015-03-10 | A10 Networks, Inc. | Allocating buffer for TCP proxy session based on dynamic network conditions |
| US9602442B2 (en) | 2012-07-05 | 2017-03-21 | A10 Networks, Inc. | Allocating buffer for TCP proxy session based on dynamic network conditions |
| US9154584B1 (en) | 2012-07-05 | 2015-10-06 | A10 Networks, Inc. | Allocating buffer for TCP proxy session based on dynamic network conditions |
| US10491523B2 (en) | 2012-09-25 | 2019-11-26 | A10 Networks, Inc. | Load distribution in data networks |
| US10516577B2 (en) | 2012-09-25 | 2019-12-24 | A10 Networks, Inc. | Graceful scaling in software driven networks |
| US10002141B2 (en) | 2012-09-25 | 2018-06-19 | A10 Networks, Inc. | Distributed database in software driven networks |
| US9843484B2 (en) | 2012-09-25 | 2017-12-12 | A10 Networks, Inc. | Graceful scaling in software driven networks |
| US10862955B2 (en) | 2012-09-25 | 2020-12-08 | A10 Networks, Inc. | Distributing service sessions |
| US9705800B2 (en) | 2012-09-25 | 2017-07-11 | A10 Networks, Inc. | Load distribution in data networks |
| US10021174B2 (en) | 2012-09-25 | 2018-07-10 | A10 Networks, Inc. | Distributing service sessions |
| US9544364B2 (en) | 2012-12-06 | 2017-01-10 | A10 Networks, Inc. | Forwarding policies on a virtual service network |
| US9338225B2 (en) | 2012-12-06 | 2016-05-10 | A10 Networks, Inc. | Forwarding policies on a virtual service network |
| US9531846B2 (en) | 2013-01-23 | 2016-12-27 | A10 Networks, Inc. | Reducing buffer usage for TCP proxy session based on delayed acknowledgement |
| US9900252B2 (en) | 2013-03-08 | 2018-02-20 | A10 Networks, Inc. | Application delivery controller and global server load balancer |
| US11005762B2 (en) | 2013-03-08 | 2021-05-11 | A10 Networks, Inc. | Application delivery controller and global server load balancer |
| US9722918B2 (en) | 2013-03-15 | 2017-08-01 | A10 Networks, Inc. | System and method for customizing the identification of application or content type |
| US10594600B2 (en) | 2013-03-15 | 2020-03-17 | A10 Networks, Inc. | System and method for customizing the identification of application or content type |
| US9912555B2 (en) | 2013-03-15 | 2018-03-06 | A10 Networks, Inc. | System and method of updating modules for application or content identification |
| US9992107B2 (en) | 2013-03-15 | 2018-06-05 | A10 Networks, Inc. | Processing data packets using a policy based network path |
| US10708150B2 (en) | 2013-03-15 | 2020-07-07 | A10 Networks, Inc. | System and method of updating modules for application or content identification |
| US10659354B2 (en) | 2013-03-15 | 2020-05-19 | A10 Networks, Inc. | Processing data packets using a policy based network path |
| US10581907B2 (en) | 2013-04-25 | 2020-03-03 | A10 Networks, Inc. | Systems and methods for network access control |
| US10091237B2 (en) | 2013-04-25 | 2018-10-02 | A10 Networks, Inc. | Systems and methods for network access control |
| US9838425B2 (en) | 2013-04-25 | 2017-12-05 | A10 Networks, Inc. | Systems and methods for network access control |
| US10305904B2 (en) | 2013-05-03 | 2019-05-28 | A10 Networks, Inc. | Facilitating secure network traffic by an application delivery controller |
| US10038693B2 (en) | 2013-05-03 | 2018-07-31 | A10 Networks, Inc. | Facilitating secure network traffic by an application delivery controller |
| US10027761B2 (en) | 2013-05-03 | 2018-07-17 | A10 Networks, Inc. | Facilitating a secure 3 party network session by a network device |
| US10230770B2 (en) | 2013-12-02 | 2019-03-12 | A10 Networks, Inc. | Network proxy layer for policy-based application proxies |
| US9942152B2 (en) | 2014-03-25 | 2018-04-10 | A10 Networks, Inc. | Forwarding data packets using a service-based forwarding policy |
| US10257101B2 (en) | 2014-03-31 | 2019-04-09 | A10 Networks, Inc. | Active application response delay time |
| US9942162B2 (en) | 2014-03-31 | 2018-04-10 | A10 Networks, Inc. | Active application response delay time |
| US10454879B2 (en)* | 2014-04-22 | 2019-10-22 | Pismo Labs Technology Limited | Methods and systems for processing a DNS request |
| US10686683B2 (en) | 2014-05-16 | 2020-06-16 | A10 Networks, Inc. | Distributed system to determine a server's health |
| US9906422B2 (en) | 2014-05-16 | 2018-02-27 | A10 Networks, Inc. | Distributed system to determine a server's health |
| US10129122B2 (en) | 2014-06-03 | 2018-11-13 | A10 Networks, Inc. | User defined objects for network devices |
| US9986061B2 (en) | 2014-06-03 | 2018-05-29 | A10 Networks, Inc. | Programming a data network device using user defined scripts |
| US10880400B2 (en) | 2014-06-03 | 2020-12-29 | A10 Networks, Inc. | Programming a data network device using user defined scripts |
| US9992229B2 (en) | 2014-06-03 | 2018-06-05 | A10 Networks, Inc. | Programming a data network device using user defined scripts with licenses |
| US10749904B2 (en) | 2014-06-03 | 2020-08-18 | A10 Networks, Inc. | Programming a data network device using user defined scripts with licenses |
| US10505964B2 (en) | 2014-12-29 | 2019-12-10 | A10 Networks, Inc. | Context aware threat protection |
| US9621575B1 (en) | 2014-12-29 | 2017-04-11 | A10 Networks, Inc. | Context aware threat protection |
| US10581976B2 (en) | 2015-08-12 | 2020-03-03 | A10 Networks, Inc. | Transmission control of protocol state exchange for dynamic stateful service insertion |
| US10243791B2 (en) | 2015-08-13 | 2019-03-26 | A10 Networks, Inc. | Automated adjustment of subscriber policies |
| US9787581B2 (en) | 2015-09-21 | 2017-10-10 | A10 Networks, Inc. | Secure data flow open information analytics |
| US10812348B2 (en) | 2016-07-15 | 2020-10-20 | A10 Networks, Inc. | Automatic capture of network data for a detected anomaly |
| US10341118B2 (en) | 2016-08-01 | 2019-07-02 | A10 Networks, Inc. | SSL gateway with integrated hardware security module |
| US10382562B2 (en) | 2016-11-04 | 2019-08-13 | A10 Networks, Inc. | Verification of server certificates using hash codes |
| US10250475B2 (en) | 2016-12-08 | 2019-04-02 | A10 Networks, Inc. | Measurement of application response delay time |
| US10397270B2 (en) | 2017-01-04 | 2019-08-27 | A10 Networks, Inc. | Dynamic session rate limiter |
| US10187377B2 (en) | 2017-02-08 | 2019-01-22 | A10 Networks, Inc. | Caching network generated security certificates |
| USRE47924E1 (en) | 2017-02-08 | 2020-03-31 | A10 Networks, Inc. | Caching network generated security certificates |
| US11159354B2 (en)* | 2017-05-12 | 2021-10-26 | Qualcomm Incorporated | Increasing reference signal density in wireless communications |
Also Published As
| Publication number | Publication date |
|---|---|
| US20180367430A1 (en) | 2018-12-20 |
| CN104106241A (en) | 2014-10-15 |
| CN104106241B (en) | 2017-09-01 |
| CN107580029B (en) | 2021-01-22 |
| WO2013112492A1 (en) | 2013-08-01 |
| CN107580029A (en) | 2018-01-12 |
| US10904119B2 (en) | 2021-01-26 |
| US10044582B2 (en) | 2018-08-07 |
| HK1198848A1 (en) | 2015-06-12 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| US10904119B2 (en) | Generating secure name records | |
| US10728382B2 (en) | Selectively providing content to users located within a virtual perimeter | |
| US11704421B2 (en) | Domain name obfuscation and metadata storage via encryption | |
| US9699165B2 (en) | Providing localized content delivery with remote token authentication | |
| CN113630266B (en) | Method and device for instantiating edge application server | |
| US12052220B2 (en) | Firewall system with application identifier based rules | |
| US9942050B2 (en) | Method and apparatus for bulk authentication and load balancing of networked devices | |
| US11025970B2 (en) | Controlling bandwidth usage by media streams by limiting streaming options provided to client systems | |
| US9888038B2 (en) | Method and apparatus for providing mobile and social services via virtual individual servers | |
| CN112217910B (en) | Video service access method, device, network equipment and storage medium | |
| CN105338020B (en) | A kind of business access method and device | |
| US9071569B1 (en) | System, method, and computer program for content metadata and authorization exchange between content providers and service providers | |
| US10389786B1 (en) | Output tracking for protected content-stream portions | |
| Alam | Cloud Computing–Architecture, Platform and Security Issues: A Survey | |
| HK1198848B (en) | System and method to generate secure name records | |
| CN106445410B (en) | Storage device sharing method and system and intelligent gateway with system | |
| US20130290730A1 (en) | Systems and methods for data access protection | |
| US12438848B2 (en) | Discovery and assignment of privacy-protecting relays in a network | |
| CN101656607A (en) | Method, system and device for determining assertion sender | |
| CN108833396A (en) | A kind of method, apparatus really weighed, system and terminal | |
| HK1198565B (en) | Methods to combine stateless and stateful server load balancing | |
| HK1198565A1 (en) | Methods to combine stateless and stateful server load balancing |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| AS | Assignment | Owner name:A10 NETWORKS, INC., CALIFORNIA Free format text:ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNORS:HAN, LIANG;YANG, YANG;SIGNING DATES FROM 20120127 TO 20120128;REEL/FRAME:027613/0179 | |
| AS | Assignment | Owner name:A10 NETWORKS, INC., CALIFORNIA Free format text:CHANGE OF ADDRESS;ASSIGNOR:A10 NETWORKS, INC.;REEL/FRAME:031075/0954 Effective date:20130822 | |
| AS | Assignment | Owner name:ROYAL BANK OF CANADA, AS COLLATERAL AGENT, CANADA Free format text:SECURITY INTEREST;ASSIGNOR:A10 NETWORKS, INC.;REEL/FRAME:031485/0284 Effective date:20130930 | |
| FEPP | Fee payment procedure | Free format text:ENTITY STATUS SET TO UNDISCOUNTED (ORIGINAL EVENT CODE: BIG.); ENTITY STATUS OF PATENT OWNER: LARGE ENTITY | |
| STCF | Information on status: patent grant | Free format text:PATENTED CASE | |
| MAFP | Maintenance fee payment | Free format text:PAYMENT OF MAINTENANCE FEE, 4TH YEAR, LARGE ENTITY (ORIGINAL EVENT CODE: M1551); ENTITY STATUS OF PATENT OWNER: LARGE ENTITY Year of fee payment:4 |